Fixed #17133 -- Properly handled successive slashes in incoming requests

Thanks gjanee@ucop.edu for the report and Tim Graham for the review.

2 files changed, 27 insertions, 0 deletions

diff --git a/tests/handlers/tests.py b/tests/handlers/tests.py
index 6097754b59..76cfe5161c 100644
--- a/tests/handlers/tests.py
+++ b/tests/handlers/tests.py
@@ -211,3 +211,14 @@ class ScriptNameTests(SimpleTestCase):
 
         script_name = get_script_name({'SCRIPT_URL': '/foobar/', 'PATH_INFO': '/'})
         self.assertEqual(script_name, '/foobar')
+
+    def test_get_script_name_double_slashes(self):
+        """
+        WSGI squashes multiple successive slashes in PATH_INFO, get_script_name
+        should take that into account when forming SCRIPT_NAME (#17133).
+        """
+        script_name = get_script_name({
+            'SCRIPT_URL': '/mst/milestones//accounts/login//help',
+            'PATH_INFO': '/milestones/accounts/login/help',
+        })
+        self.assertEqual(script_name, '/mst')
diff --git a/tests/requests/tests.py b/tests/requests/tests.py
index 0b6254d0bb..66fe8c92ec 100644
--- a/tests/requests/tests.py
+++ b/tests/requests/tests.py
@@ -104,6 +104,22 @@ class RequestsTests(SimpleTestCase):
         })
         self.assertEqual(request.path, '/PREFIX/somepath/')
 
+    def test_wsgirequest_script_url_double_slashes(self):
+        """
+        WSGI squashes multiple successive slashes in PATH_INFO, WSGIRequest
+        should take that into account when populating request.path and
+        request.META['SCRIPT_NAME'].
+        Refs #17133.
+        """
+        request = WSGIRequest({
+            'SCRIPT_URL': '/mst/milestones//accounts/login//help',
+            'PATH_INFO': '/milestones/accounts/login/help',
+            'REQUEST_METHOD': 'get',
+            'wsgi.input': BytesIO(b''),
+        })
+        self.assertEqual(request.path, '/mst/milestones/accounts/login/help')
+        self.assertEqual(request.META['SCRIPT_NAME'], '/mst')
+
     def test_wsgirequest_with_force_script_name(self):
         """
         Ensure that the FORCE_SCRIPT_NAME setting takes precedence over the