Hello!

I am running haproxy-1.4.22 with option accept-invalid-http-request turned on (the default).

It seems that haproxy successfully validates requests with unencoded '%' characted in it:

http://some.host.net/api/v1/do_smth?lang=en-ru&text=100%%20Pure%20Mulberry%20Queen

(note unencoded % after 100).

I see such requests in my backend's log. I expect haproxy return HTTP 400 (Bad Request) in such cases.

Is it a bug or am I missing something?

Thanks!

Reply via email to