Agent Guides › SAML Affiliate Agent Guide › Configure Global Settings › Handle Security Issues in Request URLs › Designate Bad Query Characters

Previous Topic: Designate Bad URL Characters

Next Topic: Protect Web Sites Against Cross-Site Scripting
Designate Bad Query Characters

If you do not wish to allow escaped characters in query data, you can block the specified characters by using the BadQueryChars element. This element is configured in the same manner and works exactly the same as the BadURLChars element, except that it checks characters that follow the query character (?), or "hook," in a URL. For example:

BadQueryChars="%25"

By default, this setting does not function unless specified values are entered for the element.