KNOX-3072: Added blockEncodedForwardSlash to ShiroConfig

apache · Nov 4, 2024 · 0bab6f7 · 0bab6f7
1 parent 9e34610
commit 0bab6f7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/...rovider-security-shiro/src/main/java/org/apache/knox/gateway/deploy/impl/ShiroConfig.java b/...rovider-security-shiro/src/main/java/org/apache/knox/gateway/deploy/impl/ShiroConfig.java
@@ -37,6 +37,7 @@ public ShiroConfig(Provider provider, String clusterName) {
     params.putIfAbsent("main.invalidRequest.blockSemicolon", "false");
     params.putIfAbsent("main.invalidRequest.blockBackslash", "false");
     params.putIfAbsent("main.invalidRequest.blockNonAscii", "false");
+    params.putIfAbsent("main.invalidRequest.blockEncodedForwardSlash", "false");
 
     for(Entry<String, String> entry : params.entrySet()) {
       int sectionDot = entry.getKey().indexOf('.');