URL Encording issue

WooBak — Wed, 10 May 2023 05:32:05 GMT

I am using URL Block Page.
However, there is a part where the & part appears as %26 in a specific URL.

ex. I entered abc.d/&uid=B5C61D407 in the browser, but it appears as URL:abc.d/%26uid=B5C61D407 in the block page. Why is this and what can be done to fix it?

Re: URL Encording issue

Adrian_Jensen — Wed, 10 May 2023 23:22:48 GMT

The "%26" is a hexadecimal-encoded HTML representation of the ASCII ampersand character "&". That is often used when passing strings between subsystems to prevent unwanted variable expansion or misinterpretation. The value is printed by the "<url/>" variable in the response page format, so it is coming out of the PA as that. Given that other commonly encoded characters display correctly (i.e. "/" vs. "%2F", "=" vs. "%3D", "?" vs. "%3F") I would suspect PA forgot to unencode this value when passing the variable for display. Unfortunately, not much that can be done from the customer side, you would have to open a ticket with PA support for a fix.

topic URL Encording issue in Next-Generation Firewall Discussions

URL Encording issue

Re: URL Encording issue