Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-users] How to prevent Jetty from sanitizing non-UTF-8 character in HTTP request?

The request URL has something bad apparently.
Do you have a stacktrace that shows this?

We removed many of these types of silent failures of the past year, looks like we missed one.

Joakim Erdfelt / joakim@xxxxxxxxxxx

On Tue, Nov 21, 2017 at 2:26 PM, Indra Basak <indra.basak1@xxxxxxxxx> wrote:
I am using Jetty version '9.4.7.v20170914' and I have a requirement to reject any request which contains a non-UTF-8 character in the request URL or body.

While looking ar 'URIUtil' class, it seemed Jetty is catching the 'NotUtf8Exception' exception in  'decodePath' method and then replacing the non-UTF-8 character in 'decodeISO88591Path' method.

Is there a way to prevent Jetty from eating the 'NotUtf8Exception' exception?

Cheers,

Indra

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users


Back to the top