Re: Option to reject invalid percent encoded URLs?

2022-02-25 Thread Jesse Hathaway
On Fri, Feb 25, 2022 at 11:57 AM Tim Düsterhus wrote: > As far as I can tell currently this is only possible to achieve as a > side-effect of the 'percent-*' normalizers of http-request normalize-uri: > > http-request normalize-uri percent-to-uppercase strict > > will reject requests with inv

Re: Option to reject invalid percent encoded URLs?

2022-02-25 Thread Tim Düsterhus
Jesse, On 2/25/22 18:25, Jesse Hathaway wrote: invalid percent encoded URLs with a 400 Bad Request. Is there an option to have HAProxy reject them as well, I couldn't find one in the docs, As far as I can tell currently this is only possible to achieve as a side-effect of the 'percent-*' norm

Option to reject invalid percent encoded URLs?

2022-02-25 Thread Jesse Hathaway
HAProxy accepts invalid percent encoded URLs, such as http://example.com/%, whereas some web servers, such as nginx, reject invalid percent encoded URLs with a 400 Bad Request. Is there an option to have HAProxy reject them as well, I couldn't find one in the docs, though accept-invalid-http-reques