The valid characters are defined in RFC 7230 and RFC 3986 security vulnerabilities, 72303986

The valid characters are defined in RFC 7230 and RFC 3986 security vulnerabilities, 72303986

In the past, apache-tomcat-7.0.65 was used to scan for security vulnerabilities and upgrade tomcat to 7.0.79, however, The APP reports The valid characters are defined in RFC 7230 and RFC 3986 error. After reading the official documents for two days, I finally solved the problem.

Simply put, add the following two lines to the apache-tomcat-7.0.79/conf/catalina. properties file.

Org. apache. tomcat. util. buf. UDecoder. ALLOW_ENCODED_SLASH = truetomcat. util. http. parser. HttpParser. requestTargetAllow = {,}

Remarks: {,} Is in json format.