[SHIRO-801] Shiro blocks requests with non-ACII characters in the URL path

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.7.0
• Assignee: Unassigned
• Reporter: Tuure Laurinolli
• Created: 20/Nov/20 09:54
• Updated: 20/Nov/20 15:55

Description

When trying to upgrade to Shiro 1.7.0 we noticed that some of our tests started failing. The tests validate that scandinavian characters (äöå) can be used in object ids in our system.

It appears that SHIRO-794 changed URL validation so that scandinavian characters are no longer allowed in the decoded path component of the URL. The relevant code change is https://github.com/apache/shiro/commit/a28300448ae6c4bb78a8ba626b0cacb00f82d5f8#diff-bd4bf9dfa4cc7521c708850ac5d397fee22b021ea09a3a91f7ce1587abc287d7

Is there some reason to not allow non-ASCII characters in the URL path?