Mercurial > hg > orthanc
view README @ 2248:69b0f4e8a49b
Escape multipart type parameter value in Content-Type header
## Summary
Multipart responses do not quote/escape the value of their type
parameter (the subtype) even though it always contains at least one
special character (the slash "/"), which confuses standard-compliant
HTTP clients.
## Details
The Content-Type header in HTTP is in RFC 7231, Section 3.1.1.5:
https://tools.ietf.org/html/rfc7231#section-3.1.1.5
The section defers to the media type section (3.1.1.1) for the syntax of
the media type:
https://tools.ietf.org/html/rfc7231#section-3.1.1.1
This states that a parameter value can be quoted:
parameter = token "=" ( token / quoted-string )
A parameter value that matches the token production can be transmitted
either as a token or within a quoted-string. The quoted and unquoted
values are equivalent.
Tokens are defined in RFC 7230, Section 3.2.6 (via RFC 7231, appendix
C):
https://tools.ietf.org/html/rfc7231#appendix-C
https://tools.ietf.org/html/rfc7230#section-3.2.6
Here we observe that tokens cannot contain a slash "/" character:
token = 1*tchar
tchar = "!" / "#" / "$" / "%" / "&" / "'" / "*"
/ "+" / "-" / "." / "^" / "_" / "`" / "|" / "~"
/ DIGIT / ALPHA
; any VCHAR, except delimiters
Delimiters are chosen from the set of US-ASCII visual characters not
allowed in a token (DQUOTE and "(),/:;<=>?@[\]{}").
However, the current implementation does not quote/escape the value of
the type parameter:
multipart/related; type=application/dicom
Instead, it should be:
multipart/related; type="application/dicom"
All of this also seems to apply to the MIME Content-Type header
definition, even though it is a little different:
https://www.iana.org/assignments/message-headers
https://tools.ietf.org/html/rfc2045#section-5.1
https://tools.ietf.org/html/rfc2387
author | Thibault Nélis <tn@osimis.io> |
---|---|
date | Mon, 16 Jan 2017 13:07:11 +0100 |
parents | 630606097798 |
children | b2f57399b067 |
line wrap: on
line source
Orthanc - A Lightweight, RESTful DICOM Server ============================================= General Information ------------------- General information about this software can be found on its official Website: http://www.orthanc-server.com/ The instructions for building Orthanc can be found in the "INSTALL" file. Supported Platforms ------------------- Currently, the officially supported platforms are: * GNU/Linux (32bit and 64bit). * Windows 32bit. * Apple OS X (32bit and 64bit). Supported Toolchains -------------------- Orthanc can currently be built using the following compiling toolchains: * Native GNU/Linux compilation, with gcc. * Native Windows compilation, with Microsoft Visual Studio. * Cross-compilation for Windows under GNU/Linux, with MinGW. Licensing --------- Orthanc is licensed under the GPLv3 license, with the OpenSSL exception: http://people.gnome.org/~markmc/openssl-and-the-gpl.html We also kindly ask scientific works and clinical studies that make use of Orthanc to cite Orthanc in their associated publications. Similarly, we ask open-source and closed-source products that make use of Orthanc to warn us about this use. You can cite our work using the following BibTeX entry: @inproceedings{Jodogne:ISBI2013, author = {Jodogne, S. and Bernard, C. and Devillers, M. and Lenaerts, E. and Coucke, P.}, title = {Orthanc -- {A} Lightweight, {REST}ful {DICOM} Server for Healthcare and Medical Research}, booktitle={Biomedical Imaging ({ISBI}), {IEEE} 10th International Symposium on}, year={2013}, pages={190-193}, ISSN={1945-7928}, month=apr, url={http://ieeexplore.ieee.org/xpl/articleDetails.jsp?tp=&arnumber=6556444}, address={San Francisco, {CA}, {USA}} } Licensing of special directories -------------------------------- The following directories have separate licensing terms: * The file of the "Core/SQLite/" directory are licensed under the 3-clause BSD license, as they are derived from the Chromium project. Content ------- This archive contains the following directories: * Core/ - The core C++ classes (independent of DCMTK) * OrthancExplorer/ - Code of the Web application (HTML5/Javascript) * OrthancServer/ - Code of the Orthanc server (depends on DCMTK) * Plugins/ - Code of the plugin framework * Resources/ - Scripts, resources for building third-party code * UnitTestsSources/ - Unit tests This archive contains the following files: * AUTHORS - The list of the authors * CMakeLists.txt - The main build script * COPYING - The GPLv3 license * INSTALL - How to build Orthanc * README - This file * THANKS - The list of the contributors * NEWS - The history of main changes between versions We have decided not to maintain a separate "ChangeLog" file. Each commit to the official Orthanc Mercurial repository should be associated with a description of the changes.