HTTP Status 500 - The request was rejected because the URL contained a potentially malicious String "%25"

type Exception report

message The request was rejected because the URL contained a potentially malicious String "%25"

description The server encountered an internal error that prevented it from fulfilling this request.

exception

org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL contained a potentially malicious String "%25"
	org.springframework.security.web.firewall.StrictHttpFirewall.rejectedBlocklistedUrls(StrictHttpFirewall.java:456)
	org.springframework.security.web.firewall.StrictHttpFirewall.getFirewalledRequest(StrictHttpFirewall.java:429)
	org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:196)
	org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:183)
	org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358)
	org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271)

note The full stack trace of the root cause is available in the Apache Tomcat/8.5.5 logs.


Apache Tomcat/8.5.5