Details
-
Bug
-
Resolution: Not a bug
-
Low
-
None
-
6.4.3
-
None
-
Severity 3 - Minor
-
Description
Summary
REST API will not work when the parameter contains slash "/".
For example, GET membership REST API URI will not work if the group contains slash "/".
Steps to Reproduce
- Create a group that contains slash, for example "group/1"
- Try to list out its members using REST API.
Actual Result:
- <confluence base_URL>/rest/api/group/group/1/member ---> Gives 400 error.
- <confluence base_URL>/rest/api/group/group%2F1/member ---> Gives 400 error.
- <confluence base_URL>/rest/api/group/group%252F1/member ---> Gives 0 members
Notes
The issue happens because Tomcat actually intentionally prevents URL decoding of / for some kind of security reason:
Workaround
Add the following in the JVM argument:
-Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
More information on setting up JVM Arguments: Configuring System Properties