400 Bad request

[Francis Daly]

On Wed, Sep 14, 2011 at 06:48:25AM -0400, coviex wrote:

Hi there,

> Having problems with urls containing percent sign. Most of them return
> 400 and don't even appear neither in error.log nor in access.log.

% is an escape character within a url. It must be followed by exactly
two hex-characters, or the url is invalid and the request is bad.

> GET /download-%27.07%%27.html?frame=1 HTTP/1.1

The first one there is %27 and decodes to '.

The second one is %%2 and is invalid.

> What's wrong with them?

They're broken.

Whatever is generating that url should be fixed so that it is properly
encoded/escaped.

If the filename is download-'.07%'.html, it should appear in the url
as download-%27.07%25%27.html

All the best,

	f
-- 
Francis Daly        francis at daoine.org