#984831 switch from semicolon ';' to ampersand '&' for query parameter separation

#984831#5
Date:
2021-03-08 20:42:46 UTC
From:
To:
Hi,

As reported on #debian-til, python can no longer parse bugs.d.o URLs
correctly out of the box. The change was backported as a security update
to 3.6+ so also affects buster.

https://bugs.python.org/issue42967

From what I can tell, the search form and msg= use semicolon and I
actually can't find any with ampersand. I had a poke through salsa and
believe this can be fixed with a `s/query_form/query_param/g`, but I
don't know Perl. This feature was added in 2006 and has been completely
untouched since then, so presumably it's missing upstream bugfixes.

https://salsa.debian.org/debbugs-team/debbugs/-/commit/2c18114353029cfd5784df5c6def6c0b22de4ca7
--
Phil Morrell (emorrp1)

#984831#8
Date:
2021-03-10 00:04:50 UTC
From:
To:
Control: retitle -1 switch from semicolon ';' to ampersand '&' for query parameter separation

This looks like an issue in python's urllib. ';' are perfectly valid
query parameter separators for URIs and anything consuming debbugs URIs
should pass appropriate options to support them. That said, we probably should
switch away from semicolons as they are no longer recommended.

Everything uses semicolon, but we can probably just make Debbugs::URI
call query_form instead of query_param.

#984831#15
Date:
2021-03-17 20:18:35 UTC
From:
To:
fwiw, that seems to be a non-sequitur. Yes, it's been backported
upstream, but there's been no corresponding upload to buster of any
Python version that incorporates the change that I can see.

Regards,

Adam