Notes/Domino Fix List
SPR # KGAI5L9SBPFixed in 6.0.3; 6.5 releaseSecurity fix



Product Area: Server Technical Area: Web Server Platform: Cross Platform

SPR# KGAI5L9SBP - Added INI variable to control if percent symbols are allowed in URLs.

HTTPAllowDecodedUrlPercent=1


Technote Number: 1107117

Problem:
This issue was reported to Lotus software Quality Engineering and has been
addressed in Domino 6.0.3 with the addition of the NOTES.INI parameter
HTTPAllowDecodedUrlPercent=1. Add this parameter to the server's NOTES.INI
file to avoid the error.

To work around the issue in earlier releases, do not use multiply encoded
escape character sequences; special characters should be singly encoded instead.

Related Information:

For more information on Domino 6 URL filtering and validation procedures, see
the following article on developerWorks: Lotus:

"Building Web applications in Domino 6: Web site rules"
More >



Last Modified on 08/22/2006

Go back