tomcat异常处理-IllegalArgumentException Invalid character found in the request target

番茄炒蛋不加蛋

于 2023-05-30 23:19:43 发布

阅读量258

点赞数

文章标签： tomcat java 前端

原文链接：https://www.cnblogs.com/super-hu/p/13209564.html

版权

问题

代码提交安全渗透后，被打回。报异常如下，直接返回错误页面。期望返回统一异常码。

<!doctype html><html lang="en"><head><title>HTTP Status 400 – Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 – Bad Request</h1><hr class="line" /><p><b>Type</b> Exception Report</p><p><b>Message</b> Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986</p><p><b>Description</b> The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing).</p><p><b>Exception</b></p><pre>java.lang.IllegalArgumentException: Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986
	org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:483)
	org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:502)
	org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
	org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:818)
	org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1623)
	org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	java.lang.Thread.run(Thread.java:748)
</pre><p><b>Note</b> The full stack trace of the root cause is available in the server logs.</p><hr class="line" /><h3>x</h3></body></html>

原因分析

由于自己代码已经设置了全局异常处理，如果进入controller后报的异常，应该就能被捕获到。所以判断异常发生在进入controller之前。所以就是在tomcat异常。查资料后发现是由于tomcat版本过高导致的。tomcat8.0以上版本遵从RFC规范添加了对Url的特殊字符的限制，url中只允许包含英文字母(a-zA-Z)、数字(0-9)、-_.~四个特殊字符以及保留字符( ! * ’ ( ) ; : @ & = + $ , / ? # [ ] ) (26*2+10+4+18=84)这84个字符,请求中出现了{}大括号或者[],所以tomcat报错。

解决

方案一：降低tomcat的版本（不推荐）
方案二：修改tomcat配置（看情况）

1. 在tomcat安装路径中conf/catalina.properties中最后添加2行：
tomcat.util.http.parser.HttpParser.requestTargetAllow=|{}
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true

2. 在conf/server.xml中的<Connector>节点中，添加2个属性（可以接收任意特殊字符的组合，自行配置）：
relaxedPathChars="|{}[],\"
relaxedQueryChars="|{}[],\"

方案三：注入bean，替换特殊字符(推荐)

@Bean
 public ConfigurableServletWebServerFactory webServerFactory() {
     TomcatServletWebServerFactory factory = new TomcatServletWebServerFactory();
     factory.addConnectorCustomizers((TomcatConnectorCustomizer) connector -> connector.setProperty("relaxedQueryChars", "|{}[]\\"));
     return factory;
 }

参考

Springboot 报错 Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986

终极解决方案： Invalid character found in the request target.

番茄炒蛋不加蛋

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
tomcat异常处理-IllegalArgumentException Invalid character found in the request target

tomcat8.0以上版本遵从RFC规范添加了对Url的特殊字符的限制，url中只允许包含英文字母(a-zA-Z)、数字(0-9)、-_.~四个特殊字符以及保留字符(!# [ ] ) (26*2+10+4+18=84)这84个字符,请求中出现了{}大括号或者[],所以tomcat报错。
复制链接

扫一扫