On line 473 in http_server.py the request is unquoted. I would suggest
that the unquoting is moved to AFTER the crack_request call, and that
then a call to something like:
     uri = unquote_plus(uri)
is done.

I need to do this in my app to get quoted characters working in the
URIs. (using Medusa + Quixote)
It makes more sense to me to unquote only the URI portion of the
request and not the entire shebang.

Or am I missing something?

Etienne Posthumus
Amsterdam, Nederland