Java Agents 2023.11.2

Handle Invalid Escape Sequences

When set to true any attempt to URL encode a control character (range %00-%1F inclusive, or %7F) will be rejected with an HTTP 400 response.

Invalid encodings, such as %G1 will also be rejected, although these should already have been rejected by the container.

Property name

org.forgerock.agents.reject.invalid.escape.sequences.enabled

Aliases

org.forgerock.agents.reject.invalid.escape.sequences.enabled
  Introduced in Java Agent 2023.11.2

Function

Configure behaviour

Type

Boolean: true returns true; all other strings return false.

Default

true

Bootstrap property

No

Required property

No

Restart required

No

Local configuration file

AgentConfig.properties