Forum Discussion
Matt_Breedlove_
Nimbostratus
NimbostratusURI::Decode or not to URI::Decode when filtering
I am writing a basic URL filter to allow a handful of URLS.
Is it more secure to filter on the raw URL or the URI:Decode'd URL?
The biggest concern is security. I don't people to be able to us...
It's always best to decode the URI if you are concerned with users trying to bypass your filter. The overhead is minimal but it allows you to bring the URL into it's base form so there will be no question about it.
-Joe
