Short Name |
HTTP:AUDIT:BINARY-IN-URLENCODE |
---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
Non-Encoded Binary Detected In URLEncode Content Type |
Release Date |
2012/09/07 |
Update Number |
2183 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
This signature detects for conformance to RFC 1738 that specifies the handling of URL-Encoded data. If a client specifies a Content-Type of URL-Encoded, any binary data - including Unicode characters - should be properly encoded. This signature will trigger on both malicious abuse of this standard as well as mis-configured clients and web applications.