漏洞
Filtering a WFS service query string using the sign "+" results in the following error: "XML parsing failed. Reason: A name contained an invalid character."
| 漏洞 ID 编号 | BUG-000087689 |
|---|---|
| 已提交 | May 15, 2015 |
| 上次修改时间 | June 18, 2025 |
| 适用范围 | ArcGIS for Server |
| 找到的版本 | 10.3 |
| 操作系统 | Windows OS |
| 操作系统版本 | 2008 R2 64 Bit |
| 状态 | Non-Reproducible |
附加信息
Non-reproducible in 10.9.1 & 11.x WFS services.解决办法
- Use "%20" or a space " " instead of the "+" sign. From the same example, both queries with space and %20 work and result the same cities: - Example that contains space " ": http://localhost/arcgis/services/SampleWorldCities/MapServer/WFSServer?SRSNAME=urn:ogc:def:crs:EPSG:6.9:4283&TYPENAME=esri:cities&VERSION=1.1.0&OUTPUTFORMAT=text/xml; subType=gml/3.1.1/profiles/gmlsf/1.0.0/0&service=WFS&REQUEST=GetFeature&FILTER=<ogc:Filter xmlns:ogc="http://www.opengis.net/ogc" xmlns:gml="http://www.opengis.net/gml"><ogc:BBOX><ogc:PropertyName>Shape</ogc:PropertyName><gml:Envelope><gml:lowerCorner>-40 100</gml:lowerCorner><gml:upperCorner>-20 120</gml:upperCorner></gml:Envelope></ogc:BBOX></ogc:Filter> - Example that contains space "%20": http://localhost/arcgis/services/SampleWorldCities/MapServer/WFSServer?SRSNAME=urn:ogc:def:crs:EPSG:6.9:4283&TYPENAME=esri:cities&VERSION=1.1.0&OUTPUTFORMAT=text/xml; subType=gml/3.1.1/profiles/gmlsf/1.0.0/0&service=WFS&REQUEST=GetFeature&FILTER=<ogc:Filter%20xmlns:ogc="http://www.opengis.net/ogc"%20xmlns:gml="http://www.opengis.net/gml"><ogc:BBOX><ogc:PropertyName>Shape</ogc:PropertyName><gml:Envelope><gml:lowerCorner>-40%20100</gml:lowerCorner><gml:upperCorner>-20%20120</gml:upperCorner></gml:Envelope></ogc:BBOX></ogc:Filter>重现步骤
漏洞 ID: BUG-000087689
软件:
- ArcGIS for Server
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序