Dear, 

After upgrading tomcat to version 8.5.14 the webserver returns a 400 error when 
accessing any web page using a | (pipe) in one of the request parameters.

The | (pipe) is added when the URL is re-written using google analytics 
_getLinkerUrl(), see javascript function below.

<script>
var pageTracker = _gat._getTrackerByName();
var uri=pageTracker._getLinkerUrl(“http://shop.bakkerijhaasnoot.nl”);
alert(uri);
</script>

http://shop.bakkerijhaasnoot.nl?__utma=68893267.349269500.1493841017.1493841017.1493913856.2&__utmb=68893267.38.9.1493914656569&__utmc=68893267&__utmx=-&__utmz=68893267.1493841017.1.1.utmcsr=(direct)
 | utmccn=(direct) | utmcmd=(none)&_utmv=-&_utmk=59369258

Previous to tomcat 8.5.14 this was never an issue. It is possible to replace 
the | (pipe) for a %7C this prevents tomcat from returning a 400 error but how 
can we tell tomcat not to response with a 400 when a | (pipe) is used in the 
value of one of the parameters. We rolled back to an older version (tomcat 
8.5.4) to solve the issue but this is actually a temporary solution.

Thanks in advance!

John Zanoni




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to