Re: [mod-security-users] Umlauts in Request

[Ivan R. <iv...@we...>]

Ulf Stegemann wrote:

> Apache 1.3.29, mod_security 1.7.2
> 
> Whenever there's an "umlaut" (äöü) or another non-ASCII character in the
> request mod_securtiy strikes with "Invalid character detected".
> 
> This gives me some trouble because some of our customers use "umlauts" in GET
> parameters (although correctly URLencoded).
> 
> Changing the "SecFilterForceByteRange" directive hasn't had any effect and so
> I'm wondering if it is possible to tell mod_security not to filter those
> requests.

   Try "SecFilterCheckURLEncoding Off". Does that help?

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]