Jesse,

On 2/25/22 18:25, Jesse Hathaway wrote:
invalid percent encoded URLs with a 400 Bad Request. Is there an option
to have HAProxy reject them as well, I couldn't find one in the docs,

As far as I can tell currently this is only possible to achieve as a side-effect of the 'percent-*' normalizers of http-request normalize-uri:

    http-request normalize-uri percent-to-uppercase strict

will reject requests with invalid percent-encoding (and at the same time also uppercase the A-F characters in percent encoding).

Best regards
Tim Düsterhus

Reply via email to