[jboss-jira] [JBoss JIRA] (WFLY-10051) Undertow does not allow UTF-8 characters in URLs

[Stuart Douglas (JIRA)]

Stuart Douglas created WFLY-10051:
-------------------------------------

             Summary: Undertow does not allow UTF-8 characters in URLs
                 Key: WFLY-10051
                 URL: https://issues.jboss.org/browse/WFLY-10051
             Project: WildFly
          Issue Type: Bug
          Components: Web (Undertow)
            Reporter: Stuart Douglas
            Assignee: Stuart Douglas


We receive a 400 response code if using UTF-8 characters for a request, due to this check:

https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/server/protocol/http/HttpRequestParser.java#L375

This was introduced in UNDERTOW-1101. We want to understand why it is necessary for the CVE/CWE regarding request smuggling, but this ticket is to at least make this check optional as it goes against the URL_ENCODING UndertowOption when set to UTF-8 (default).



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)