Hi all,

I'm trying to figure out why Tomcat 9.0.44 seems to accept this URL:

https://some-domain.com/[foo: "bar@asd/qwe%25rty'zzzqqq{rrr|ttt]

Even when I haven't specified any "relaxedPathChars" (or when I explicitly set it to an empty string). Note all the special characters in it, including the space.

This is not the case with the embedded Tomcat. There this doesn't work (and a status code of 400 is returned as expected).

What am I missing? Can you tell me where to start with debugging this?

Regards,
Boris


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to