Get record errors out if the record id contains % character
Steps to reproduce
- Create a record with id having
%
character. Sample"id": "opendes:wellbore:foobar%20baz"
- Invoke GET
/record/opendes%3Awellbore%3Afoobar%2520baz
- The id has been URL encoded due to the presence of special characters.
Expected result
- Record Content with Status Code - 200
Actual result
- Forbidden - 403
Reasoning The Default HttpFirewall of Spring does not allow certain special characters in request URLs to avoid security related exploits.
Those characters include semi-colon ; encoded back-slash and percent symbols.
Ask
Identify if % is a valid character in record ids and add support for it (or) Disallow record ids having special characters such as %, ; etc.