Hi all,

I'm trying to figure out why Tomcat 9.0.44 seems to accept this URL:

https://some-domain.com/[foo: "bar@asd/qwe%25rty'zzzqqq{rrr|ttt]

Even when I haven't specified any "relaxedPathChars" (or when I explicitly set it to an empty string). Note all the special characters in it, including the space.

This is not the case with the embedded Tomcat. There this doesn't work (and a status code of 400 is returned as expected).

What am I missing? Can you tell me where to start with debugging this?

Regards,
Boris


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to