> Because the percent ("%") character serves as the indicator for 
> percent-encoded
> octets, it must be percent-encoded as "%25" for that octet to be used as data
> within a URI.

I don't believe HAproxy understands the difference between an not-encoded "%" 
or "%%"
and a correctly encoded "%25".

HAproxy does check every single character in the request, but not in
context with the characters before and after, I believe.

                                          

Reply via email to