Welcome Guest, Not a member yet? Register   Sign In
permitted uri chars repercussions
#1

[eluser]adx1[/eluser]
Hey everyone,

I need to be able to use the following characters in a uri: [ ] ( ) @
The documentation warns not to change the allowed characters without understanding the repercussions.
Can anyone tell me what those repercussions are or where to find out about them?
Or if the above characters are un/safe to allow?

Thanks very much!
#2

[eluser]TheFuzzy0ne[/eluser]
I've always wondered the same, and just put it down to having an extra layer of security against XSS and SQL injection attacks.
#3

[eluser]adx1[/eluser]
Also, any periods at the end of an argument don't seem to get through, even though . is permitted by default.
#4

[eluser]adx1[/eluser]
Just wondering, does anyone else have the problem with dots not getting through when they're at the end? Maybe I'm just doing something wrong.
#5

[eluser]TheFuzzy0ne[/eluser]
Seems to work OK for me. I'm wondering if this has something to do with your server configuration.




Theme © iAndrew 2016 - Forum software by © MyBB