Java Agents 5.10.4

Handle Invalid Escape Sequences

When set to true any attempt to URL encode a control character (range %00-%1F inclusive, or %7F) will be rejected with an HTTP 400 response.

Invalid encodings, such as %G1 will also be rejected, although these should already have been rejected by the container.

Property name

org.forgerock.agents.reject.invalid.escape.sequences.enabled

Aliases

org.forgerock.agents.reject.invalid.escape.sequences.enabled
  Introduced in Java Agent 5.10.4

Function

Configure behaviour

Type

Boolean: true returns true; all other strings return false.

Default

true

Bootstrap property

Yes

Required property

No

Restart required

No

Local configuration file

AgentBootstrap.properties