400 Bad request

Francis Daly francis at daoine.org
Wed Sep 14 11:13:15 UTC 2011

On Wed, Sep 14, 2011 at 06:48:25AM -0400, coviex wrote:

Hi there,

> Having problems with urls containing percent sign. Most of them return
> 400 and don't even appear neither in error.log nor in access.log.

% is an escape character within a url. It must be followed by exactly
two hex-characters, or the url is invalid and the request is bad.

> GET /download-%27.07%%27.html?frame=1 HTTP/1.1

The first one there is %27 and decodes to '.

The second one is %%2 and is invalid.

> What's wrong with them?

They're broken.

Whatever is generating that url should be fixed so that it is properly

If the filename is download-'.07%'.html, it should appear in the url
as download-%27.07%25%27.html

All the best,

Francis Daly        francis at daoine.org

More information about the nginx mailing list