[
https://issues.apache.org/jira/browse/SHIRO-826?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17383914#comment-17383914
]
Sita Geßner edited comment on SHIRO-826 at 7/20/21, 9:14 AM:
-------------------------------------------------------------
Hello [~bdemers],
thanks, that worked.
I think some debug-logging, would be really helpful.
I've tried the param "á" and this leads also to the HTTP 400.
I think blocking non ascii chars shouldn't be activated by default or it
shouldn't trigger when the chars are encoded.
I don't think it's uncommon to have encoded umlauts oder special chars like á
oder é in GET-Requests.
was (Author: sgessner):
Hello [~bdemers],
thanks, that worked.
I think some debug-logging, would be really helpful.
I've tried the param "á" and this leads also to the HTTP 400.
I think blocking non ascii chars shouldn't be activated by default or it
shouldn't trigger when die chars are encoded.
I don't think it's uncommon to have encoded umlauts oder special chars like á
oder é in GET-Requests.
> HTTP 400 with encoded umlauts in URL
> ------------------------------------
>
> Key: SHIRO-826
> URL: https://issues.apache.org/jira/browse/SHIRO-826
> Project: Shiro
> Issue Type: Bug
> Affects Versions: 1.7.1
> Reporter: Sita Geßner
> Priority: Major
> Attachments: debug.log, error-request-with-umlauts.png,
> localhost_access_log.2021-07-19.txt, success-request-without-umlauts.png
>
>
> I've updated shiro from version 1.4.2 to 1.7.1.
>
> I have an rest-endpoint with an Pathvariable:
> {code:java}
> @RestController
> @RequestMapping(value = "/inspektor/verjaehrungs-agent")
> @Slf4j
> public class MyRestController
> @GetMapping("/profile/{name}")
> public Profile getProfile(@PathVariable final String name) {
> return service.getProfile(name);
> }
> {code}
> When requesting with the Pathvariable name "Test 123" everything works fine.
> When requesting with the Pathvariable name "Test ö" I'm getting an HTTP 400.
> This error occurs also, when I encode the Pathvariable to "TEST%20%C3%B6".
>
> Before the update, everything was fine.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
