• Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Space URL encoding %2520

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Publishing] >> SharePoint Publishing >> Space URL encoding %2520 Page: [1]
Message << Older Topic   Newer Topic >>
Space URL encoding %2520 - 22.Jan.2009 11:51:05 AM   


Posts: 4
Joined: 22.Jan.2009
Status: offline
Since re-building our ISA server we are having problems with accessing certain sharepoint urls from externally that include a space double encoded as %2520 rather than just %20.

Here is an example url that won't work:


The only problem is the %2520 towards the end of the url in the querystring.

%2520 is a space character that has been encoded twice : once to get the standard %20 character and then the % encoded again to give %25 and hence %2520 overall.

It gives a Page Not Found error. If I manually remove the 25 from the %2520 then the page can be found.

Accessed internally to the network (http://pmsmoss01/... with otherwise exactly the same url) but not coming through ISA works fine with the %2520 left in.

Obviously these urls are automatically generated from sharepoint so no way that I can see to stop it producing the %2520 but why is our re-built and patched up ISA giving this problem? Is there a setting I can change?


Paul Baker
Post #: 1
RE: Space URL encoding %2520 - 22.Jan.2009 12:39:12 PM   


Posts: 463
Joined: 25.Nov.2008
Status: offline
I havent come across this kind of problem before but i could relate it to a setting in ISA
I think this can be resolved with "Verify Normalization" property in the HTTP Filtering

Goto the SharePoint rules property > Traffic Tab and click Filtering and then Configure Filtering > On general tab check the box which says  "verify normalization" and click ok and apply the changes


Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to pdbaker)
Post #: 2
RE: Space URL encoding %2520 - 22.Jan.2009 1:28:25 PM   


Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
Actually, in this case you would want to disable 'verify normalization'.  When the option to verify normalization is enabled, the ISA firewall will escape the URL, then escape it once more.  If the second escape attempt results in a string that is different from the first string, the ISA firewall will object and deny the traffic.


Richard Hicks - Forefront MVP

(in reply to inderjeet)
Post #: 3
RE: Space URL encoding %2520 - 23.Jan.2009 10:42:13 AM   


Posts: 4
Joined: 22.Jan.2009
Status: offline
You are very clever and very nice people - problem fixed. Thank you very much.

Paul Baker

(in reply to richardhicks)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Publishing] >> SharePoint Publishing >> Space URL encoding %2520 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts