[ https://issues.apache.org/jira/browse/SHIRO-790?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17180631#comment-17180631 ]
Brian Demers commented on SHIRO-790: ------------------------------------ This is a known issue, please see the following section in the Shiro docs: [https://shiro.apache.org/web.html#global-filters] > sessionIdUrlRewritingEnabled and InvalidRequestFilter conflict > -------------------------------------------------------------- > > Key: SHIRO-790 > URL: https://issues.apache.org/jira/browse/SHIRO-790 > Project: Shiro > Issue Type: Bug > Components: Authentication (log-in), Session Management > Affects Versions: 1.6.0 > Reporter: imythu > Priority: Minor > > {color:#de350b}*sessionIdUrlRewritingEnabled*{color} conflicts with > InvalidRequestFilter. The default value of sessionIdUrlRewritingEnabled is > true, so that the URL has{color:#de350b} ";"{color}. > {color:#de350b}*InvalidRequestFilter* {color}will filter URLs > with{color:#de350b} ";"{color} by default, and HTTP 400 (Invalid Request) > appears in the response. -- This message was sent by Atlassian Jira (v8.3.4#803005)