Re: Tomcat seems to accept all characters in a URL

2021-03-23 Thread Boris Petrov
On 3/23/21 6:25 PM, Mark Thomas wrote: On 23/03/2021 16:09, Boris Petrov wrote: Hi all, I'm trying to figure out why Tomcat 9.0.44 seems to accept this URL: https://some-domain.com/[foo: "bar@asd/qwe%25rty'zzzqqq{rrr|ttt] Even when I haven't specified any "relaxedPathChars" (or when I explic

Re: Tomcat seems to accept all characters in a URL

2021-03-23 Thread Mark Thomas
On 23/03/2021 16:09, Boris Petrov wrote: Hi all, I'm trying to figure out why Tomcat 9.0.44 seems to accept this URL: https://some-domain.com/[foo: "bar@asd/qwe%25rty'zzzqqq{rrr|ttt] Even when I haven't specified any "relaxedPathChars" (or when I explicitly set it to an empty string). Note al

Tomcat seems to accept all characters in a URL

2021-03-23 Thread Boris Petrov
Hi all, I'm trying to figure out why Tomcat 9.0.44 seems to accept this URL: https://some-domain.com/[foo: "bar@asd/qwe%25rty'zzzqqq{rrr|ttt] Even when I haven't specified any "relaxedPathChars" (or when I explicitly set it to an empty string). Note all the special characters in it, including