server.py:_parse_query_string: split only on first "="

Since form data is not URL encoded it may contain raw "=" characters. Limit the key/value pair split only to the *first* occurrence of "=". Signed-off-by: Philip Howard <[email protected]>
pimoroni · Aug 8, 2022 · 751f38b · 751f38b
1 parent 29909a5
commit 751f38b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/phew/server.py b/phew/server.py
@@ -31,7 +31,7 @@ def urldecode(text):
 def _parse_query_string(query_string):
   result = {}
   for parameter in query_string.split("&"):
-    key, value = parameter.split("=")
+    key, value = parameter.split("=", 1)
     key = urldecode(key)
     value = urldecode(value)
     result[key] = value
@@ -352,4 +352,4 @@ def run(host = "0.0.0.0", port = 80):
 
   loop = uasyncio.get_event_loop()
   loop.create_task(uasyncio.start_server(_handle_request, host, port))
-  loop.run_forever()
+  loop.run_forever()