Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: None
Affects Version/s: 7.1.0.CR3
Component/s: Undertow
Labels:
None

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.0.z.GA

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

We receive a 400 response code if using UTF-8 characters for a request, due to this check:

https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/server/protocol/http/HttpRequestParser.java#L375

This was introduced in UNDERTOW-1101. We want to understand why it is necessary for the CVE/CWE regarding request smuggling, but this ticket is to at least make this check optional as it goes against the URL_ENCODING UndertowOption when set to UTF-8 (default).

clones

JBEAP-13710 [GSS](7.1.z) UNDERTOW-1185 - Undertow does not allow UTF-8 characters in URLs

Closed

duplicates

JBEAP-13383 [GSS](7.0.z) Allow special characters in HTTP request

Closed

is incorporated by

JBEAP-13749 [GSS](7.0.z) Upgrade Undertow from 1.3.31 to 1.3.33

Closed

Assignee:: Stuart Douglas (Inactive)

Reporter:: Stuart Douglas (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Created:: 2017/11/04 6:23 PM

Updated:: 2018/01/15 5:14 AM

Resolved:: 2018/01/15 5:14 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates