400 Bad request

[Maxim Dounin]

Hello!

On Wed, Sep 14, 2011 at 06:48:25AM -0400, coviex wrote:

> Hi,
> 
> Having problems with urls containing percent sign. Most of them return
> 400 and don't even appear neither in error.log nor in access.log.
> 
> GET /download-%27.07%%27.html?frame=1 HTTP/1.1
> Host: www.my.eu
> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:6.0) Gecko/20100101
> Firefox/6.0 FirePHP/0.6
> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
> Accept-Language: en-us,en;q=0.5
> Accept-Encoding: gzip, deflate
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Connection: keep-alive
> x-insight: activate
> 
> HTTP/1.1 400 Bad Request
> Server: nginx/1.0.5
> Date: Wed, 14 Sep 2011 10:36:24 GMT
> Content-Type: text/html
> Content-Length: 172
> Connection: close
> 
> 
> What's wrong with them?

They aren't valid.

http://tools.ietf.org/html/rfc3986#section-2.4

   Because the percent ("%") character serves as the indicator for
   percent-encoded octets, it must be percent-encoded as "%25" for that
   octet to be used as data within a URI.

Maxim Dounin