https://bz.apache.org/bugzilla/show_bug.cgi?id=45187

--- Comment #37 from Julien Mrz <jmaurizi...@gmail.com> ---
Hi,

Do you have any update on it please ?


I'm facing an issue that seems to be related to this bug.

I've found in errorlog files that GoogleAdsBot sometimes requests urls using
"%3F" instead of "?" for query parameters.
And when the string length of query parameters are >=255 chars, it results in
"403 Forbidden".
It is very critical cause it can impact Adwords campaigns.

You can reproduce it with a standard installation of Apache2:
http://localhost/%3Ftest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255charte


Also tried on other websites, like:

- "%3F" followed by 255char:
https://apache.org/%3Ftest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255charte
=> 403 Forbidden


- "%3F" followed by 254char:
https://apache.org/%3Ftest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chartest254chart
=> 404 not found (normal behavior ?)

- "?" followed by 255char:
https://apache.org/?test255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255chartest255charte
=> works properly


I've also tried to use url rewriting to make a full redirect of any requests,
and I got the same results: works until 254 chars, after it's Forbidden.

It seems that Apache2 doesn't evaluate config or htaccess files when we got the
%3F +255char.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to