SecFilterCheckURLEncoding On
启用对请求中 URL 编码格式(如 %20)的合法性校验,防止编码绕过攻击;在 multipart/form-data 请求中不生效 。
SecFilterCheckUnicodeEncoding On
启用 UTF-8 Unicode 编码规范性检查(检测缺失字节、非法序列等),仅当后端系统支持 UTF-8 时建议开启;若环境为非 UTF-8(如 GBK 数据库/应用),开启会导致正常中文请求被误拦截(报 400 错误)。
sed -i 's#SecFilterCheckURLEncoding On#SecFilterCheckURLEncoding Off#g' $INST_TOP/ora/10.1.3/Apache/Apache/conf/security.conf
sed -i 's#SecFilterCheckUnicodeEncoding On#SecFilterCheckUnicodeEncoding Off#g' $INST_TOP/ora/10.1.3/Apache/Apache/conf/security.conf
egrep 'SecFilterCheckURLEncoding|SecFilterCheckUnicodeEncoding' $INST_TOP/ora/10.1.3/Apache/Apache/conf/security.conf
adapcctl.sh stop
adapcctl.sh start
sed -i 's#SecFilterCheckURLEncoding Off#SecFilterCheckURLEncoding On#g' $INST_TOP/ora/10.1.3/Apache/Apache/conf/security.conf
sed -i 's#SecFilterCheckUnicodeEncoding Off#SecFilterCheckUnicodeEncoding On#g' $INST_TOP/ora/10.1.3/Apache/Apache/conf/security.conf
egrep 'SecFilterCheckURLEncoding|SecFilterCheckUnicodeEncoding' $INST_TOP/ora/10.1.3/Apache/Apache/conf/security.conf
adapcctl.sh stop
adapcctl.sh start