Re: Ambiguity about how to deal with received fragments in URI

On 27/07/2023 10:05, Willy Tarreau wrote:

> Thus I'd like to collect some opinions here from other implementers.
> Are there any who reject requests containing fragments in the URI ?

As of the Servlet 6.0 specification, Servlet containers are required to 
reject such requests with a 400 response so Tomcat, Jetty etc will do so.

I'm not aware of any objections to this behaviour to date.

Mark

Received on Thursday, 27 July 2023 09:57:36 UTC