We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9be1c51 commit d415327Copy full SHA for d415327
server/src/main/resources/password/pwm/AppProperty.properties
@@ -307,7 +307,7 @@ security.http.stripHeaderRegex=\\n|\\r|(?ism)%0A|%0D
307
security.http.performCsrfHeaderChecks=false
308
security.http.promiscuousEnable=false
309
security.http.permittedUserPhotoMimeTypes=image/gif,image/png,image/jpeg
310
-security.http.permittedUrlPathCharacters=^[a-zA-Z0-9-_]*$
+security.http.permittedUrlPathCharacters=^[a-zA-Z0-9-_=\\s]*$
311
security.http.config.cspHeader=default-src 'self'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; report-uri @PwmContextPath@/public/command/cspReport
312
security.httpsServer.selfCert.futureSeconds=63113904
313
security.httpsServer.selfCert.alg=RSA
0 commit comments