https://issues.shibboleth.net/jira/browse/CPPXT-38

diff --git a/xmltooling/util/URLEncoder.cpp b/xmltooling/util/URLEncoder.cpp
index d646251..55a8187 100644 (file)
--- a/xmltooling/util/URLEncoder.cpp
+++ b/xmltooling/util/URLEncoder.cpp
@@ -43,7 +43,7 @@ void URLEncoder::decode(char* s) const
 
     for(x=0,y=0;s[y];++x,++y)
     {
-        if((s[x] = s[y]) == '%' && s[y+1] && s[y+2])
+        if((s[x] = s[y]) == '%' && isxdigit(s[y+1]) && isxdigit(s[y+2]))
         {
             s[x] = x2c(&s[y+1]);
             y+=2;