Re: [mod-security-users] "invalid unicode"?

[Ivan R. <iv...@we...>]

Mark wrote:
>>>What is with the "invalid unicode"? That was a perfectly legit
>>>request, as far as I can tell. If not a bug, then why does
>>>this occur?
>>
>> > User-Agent: ... Fran=E7ais 2.2;
>>
>>   It's this character ^ here that causes problems. You need to
>>   turn Unicode validation off. Characters over 0x7f have a special
>>   meaning in Unicode...
>=20
>=20
> Is there not a way I can disable unicode checking just for User-Agent?

   No, not yet. But as a rule of thumb Unicode checking should always
   be disabled by default and only enabled for applications that
   use Unicode. If you don't do this you are bound to get false
   positives from time to time.

--=20
Ivan Ristic (http://www.modsecurity.org)