Re: 403 Forbidden on unicode urlencoded GET parameters (SecFilter issue)

[Thomas DEBESSE <thomas.debesse@xxxxxxxxxxxxxxxxxxxxxxxxx>]

Hi, sorry, I don't know why I got a false positive yesterday, but this is not related to SecFilter, the options change nothing and removing the whole mod_security module changes nothing, so it's not related to mod_security.

So this is my problem:

When a GET parameter use an urlencoded unicode character (like “%C3%A0”) Apache answers “403 Forbidden” without logging nothing.
I just have to call something like that: http://domain/script.php?action=""> to get a 403 Forbidden answer.

Do you know what is the cause of this problem?

Thank you in advance

--
Thomas DEBESSE