mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-09-30 19:47:47 +03:00
Using the decoded uri in REQUEST_URI instead of the encoded one
This commit is contained in:
@@ -415,7 +415,7 @@ int Transaction::processURI(const char *uri, const char *method,
|
||||
m_collections.store("REQUEST_PROTOCOL",
|
||||
"HTTP/" + std::string(http_version));
|
||||
|
||||
std::string parsedURI = uri;
|
||||
std::string parsedURI = m_uri_decoded;
|
||||
// The more popular case is without domain
|
||||
if (!m_uri_decoded.empty() && m_uri_decoded.at(0) != '/') {
|
||||
bool fullDomain = true;
|
||||
|
Reference in New Issue
Block a user