3 ms·
A recent client of mine had their WAF configured to block requests with '%' in the URL. Yup. No URL encoding. "Can we remove that?" > "No, it could open up vu
by beaker52 6y ago
A recent client of mine had their WAF configured to block requests with '%' in the URL. Yup. No URL encoding.
"Can we remove that?"
> "No, it could open up vulnerabilities"
Yup. Yes, it could. Silly me.