spring boot The request was rejected because the URL was not normalized

最新推荐文章于 2022-03-10 09:46:39 发布
最新推荐文章于 2022-03-10 09:46:39 发布
阅读量257 收藏
点赞数
原文链接：http://www.cnblogs.com/jpfss/p/11049971.html
版权

升级spring boot 1.5.10.RELEASE 版本后，突然发现之前能Nginx代理能请求的地址抛如下异常：

org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL was not normalized.

at org.springframework.security.web.firewall.StrictHttpFirewall.getFirewalledRequest(StrictHttpFirewall.java:123)
at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:193)
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:177)
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:347)
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:263)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:108)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:81)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:197)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:504)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

at java.lang.Thread.run(Thread.java:748)

经过查找。

之前spring 版本中访问路径目录中出现http://ip/xxx//xx 这样访问 // 可以被处理访问。

spring boot 1.5.10.RELEASE 版本后 这样访问 // 可以被处理访问 就会出现上边异常

原文地址：https://blog.csdn.net/luanwuqingyang/article/details/79248581

转载于:https://www.cnblogs.com/jpfss/p/11049971.html

WGH100817
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
The request was rejected because the URL was not normalized.解决方案
hu10131013的博客
05-24 2万+
背景 在单点登录配置url的时候，访问一个url的时候会报如下的错误 2021-05-24 18:28:03.163 ERROR 17350 --- [nio-8082-exec-1] o.a.c.c.C.[.[.[.[dispatcherServlet] : Servlet.service() for servlet [dispatcherServlet] in context with path [/auth] threw exception org.springframework.
The request was rejected because the URL was not normalized【翻译】
hongfu951的专栏
11-13 1万+
Spring 5.0.3 RequestRejectedException: The request was rejected because the URL was not normalized spring security配置拦截请求报错：不是正规的URL请求被拒绝。 解决办法： Spring security文档提到请求阻塞的问题。 例如：它可能包含路径遍历序列（像/../）或者多...
The request was rejected because the URL was not normalized
moyanxiaoq的博客
01-03 5910
背景问题 在升级security时报了一个错:The request was rejected because the URL was not normalized。 字面意思是：不是正规的URL请求被拒绝。 有可能是“/getUser”写成了“//getUser”等类似的不正规的url。 因为security升级后对url校验更加严格了，我这边是从4.2.3.RELEASE升级到4.2.9.RE...
SpringBoot【The request was rejected because the URL was not normalized】
热门推荐
helloworld的专栏
11-27 2万+
SpringBoot整合ng-alain时报错如下： org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL was not normalized. at org.springframework.security.web.firewal...
已解决:The request was rejected because the URL was not normalized.
牧码人的博客
05-05 8664
The request was rejected because the URL was not normalized. 原因很简单，你的某个URL写的时候写成“//”这样子了，举个栗子 admin//admin/admin.HTML 绝对会报以上的错。 ...
The joint density of the maximum and its location
04-30
It is of interest' to calculate the distribution of the value of the difference between the maximum and present values of a stock or other security along with the time of occurrence of the maximum. At...
idea上传代码到github时遇到的Push rejected: Push to origin/master was rejected
01-08
在使用IntelliJ IDEA（简称Idea）上传代码到GitHub时，可能会遇到“Push rejected: Push to origin/master was rejected”的错误。这个问题通常发生在你尝试将一个新的项目推送到一个已存在文件的GitHub仓库时。以下...
SmsRejectedReceiver.rar_Rejected
09-23
当我们谈论`Intent.SMS_REJECTED`时，这是Android系统发送的一个特定意图（Intent），表明有一条短信由于某种原因未能成功发送或接收。这种情况下，我们可以创建一个`BroadcastReceiver`来捕获这个意图，并执行相应...
SpringBoot整合升级Spring Security 报错 【The request was rejected because the URL was not normalized】
weixin_45761608的博客
01-19 648
URL包含双斜杠。Spring Security 在高版本中增加了StrictHttpFirewall类，对URL校验更加严格。 解决方法： 在配置类中配置Bean @Configuration public class UrlConfig { //允许多请求地址多加斜杠 比如 /msg/list //msg/list @Bean public HttpFirewa...
SpringBoot 整合升级 Spring Security 报错 【The request was rejected because the URL was not normalized】
javaTalk
01-04 2104
目录 前言 发现问题 分析问题 解决问题 参考文档 前言 公司在推项目框架升级， 从 Spring1.x 升级到 Spring2.x , LZ 在给服务升级的时候出现一个关于 URL 中包含双斜杠被拦截的问题。 发现问题 升级框架之后，马上收到短信和邮件报警，查看 nginx 日志发现报500的全是 URL 中包含双斜杠的请求，通过 nginx 的 t...
org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because
苏雨丶
07-19 1万+
org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL was not normalized. at org.springframework.security.web.firewall.StrictHttpFirewall.getFir...
在使用 spring security 时，请求的地址栏使用 “//”的情况是后台报错处理方法
江南山水电
12-05 9012
在使用 spring security 时，请求的地址栏使用 “//”的情况是后台报如下错误： org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL contained a potentially malicious String "/...
The request was rejected because the URL was not normalized.
cuiyaoqiang的博客
11-09 2238
注意：spring boot 1.5.10.RELEASE 版本后 ，类似ip:port//resources 这样访问 // 可以被处理访问 就会出现上边异常。修改客户端请求中的//即可。
TroubleShooting--The request was rejected because the URL was not normalized.
如果能重来...
01-03 238
URL中包含两个//会导致spingboot重启。 解决方案： 需要在代码中添加自定义防火墙允许这种非标准的URL 或者找到非标准的URL请求并修改 https://stackoverflow.com/questions/48453980/spring-5-0-3-requestrejectedexception-the-request-was-rejected-because-the-ur...
请求地址时报错The request was rejected because the URL was not normalized
初心不改，事在人为
09-03 1463
原因：你访问的地址有误，我的错误是//应该为/
使用 spring security 时，请求的地址栏出现使用 “//”的情况，后台报错处理方法
weixin_42437002的博客
03-10 4762
使用 spring security 时，请求的地址栏出现使用 "//"的情况，后台报错如下： org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL contained a potentially malicious String "//" at org.springframework.security.web.firewall.
spring-security 中出现HTTP Status 403 - Forbidden错误
qq_41823899的博客
01-02 6806
首先我们先来看一下错误： 控制台打印这一串错信息： org.springframework.security.access.AccessDeniedException: Access is denied at org.springframework.security.access.vote.AffirmativeBased.decide(AffirmativeBased.java:84) a...
The request was rejected because the URL contained a potentially malicious String “；
最新发布
06-14
遇到"The request was rejected because the URL contained a potentially malicious string ‘;’"这样的错误提示，通常意味着服务器检测到了URL中存在可能被视为安全威胁的字符序列。在HTTP请求中，特别是...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值