<div dir="ltr">The io.undertow.UndertowOptions#ALLOW_UNESCAPED_CHARACTERS_IN_URL option allows you to control this.<div><br></div><div>Stuart</div></div><br><div class="gmail_quote"><div dir="ltr">On Fri, Jul 13, 2018 at 2:23 AM Brad Wood <<a href="mailto:bdw429s@gmail.com">bdw429s@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>I just had a user who updated to the latest version of my Undertow-powered server report an error when his query string contained unencoded pipe characters. (error at the bottom) This didn't happen in older versions but appears to be a valid check. In this case, my user has no control over the URL that's being sent to his site as it comes from a Microsoft Office365 app that opens a popup window to one of his URLs for authentication. It looks like this:</div><div><br></div><div><a href="https://127.0.0.1:1443/index.cfm/login:main/index?_host_Info=outlook%7Cweb%7C16.01%7Cen-us%7C89b212f8-4618-9ca2-bcf7-f1e8cb0969be%7CisDialog" target="_blank">https://127.0.0.1:1443/index.cfm/login:main/index?_host_Info=outlook|web|16.01|en-us|89b212f8-4618-9ca2-bcf7-f1e8cb0969be|isDialog</a><br></div><div><br></div><div>I have a feeling this is "working as designed" but is there a way to relax the validation here as he has no control over this URL and it is a hard stop for him?</div><div><br></div><div><div><font face="monospace, monospace">[DEBUG] <a href="http://io.undertow.request.io" target="_blank">io.undertow.request.io</a>: UT005014: Failed to parse request</font></div><div><font face="monospace, monospace">io.undertow.util.BadRequestException: UT000165: Invalid character | in request-target</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpRequestParser.handleQueryParameters(HttpRequestParser.java:523)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpRequestParser.beginQueryParameters(HttpRequestParser.java:486)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpRequestParser.handlePath(HttpRequestParser.java:410)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpRequestParser.handle(HttpRequestParser.java:248)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpReadListener.handleEventWithNoRunningRequest(HttpReadListener.java:187)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpReadListener.handleEvent(HttpReadListener.java:136)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpOpenListener.handleEvent(HttpOpenListener.java:151)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpOpenListener.handleEvent(HttpOpenListener.java:92)</font></div><div><font face="monospace, monospace"> at io.undertow.server.protocol.http.HttpOpenListener.handleEvent(HttpOpenListener.java:51)</font></div><div><font face="monospace, monospace"> at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)</font></div><div><font face="monospace, monospace"> at org.xnio.ChannelListeners$10.handleEvent(ChannelListeners.java:291)</font></div><div><font face="monospace, monospace"> at org.xnio.ChannelListeners$10.handleEvent(ChannelListeners.java:286)</font></div><div><font face="monospace, monospace"> at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)</font></div><div><font face="monospace, monospace"> at org.xnio.nio.QueuedNioTcpServer$1.run(QueuedNioTcpServer.java:129)</font></div><div><font face="monospace, monospace"> at org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:582)</font></div><div><font face="monospace, monospace"> at org.xnio.nio.WorkerThread.run(WorkerThread.java:466)</font></div></div><br clear="all"><div><div dir="ltr" class="m_553527990081242673gmail_signature"><div dir="ltr"><div><div dir="ltr"><div></div><div>Thanks!</div><div><br></div><div>~Brad</div><div><br></div><div><b>Developer Advocate</b></div><div><i>Ortus Solutions, Corp </i></div><div><b><br></b></div><div>E-mail: <a href="mailto:brad@coldbox.org" target="_blank">brad@coldbox.org</a></div><div>ColdBox Platform: <a href="http://www.coldbox.org" target="_blank">http://www.coldbox.org</a> </div><div>Blog: <a href="http://www.codersrevolution.com" target="_blank">http://www.codersrevolution.com</a></div><div><br></div></div></div></div></div></div></div>
_______________________________________________<br>
undertow-dev mailing list<br>
<a href="mailto:undertow-dev@lists.jboss.org" target="_blank">undertow-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/undertow-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/undertow-dev</a></blockquote></div>