HTTP header of microsite url contains encoded white space ‘%09’ - vulnerability for Evasion technique attack
Hi everyone
the link produced from Pega has some spaces (the %09% below) and it get blocked by the reverse proxy itself because according to our security team, this lead to Evasion technique attack vulnerability.
Hi everyone
the link produced from Pega has some spaces (the %09% below) and it get blocked by the reverse proxy itself because according to our security team, this lead to Evasion technique attack vulnerability.
GCS proposed us some solution that should have trimmed the spaces but unfortunately it didn’t work (the spaces are still there).
has anyone faced similar problem ? how it can be solved?
***Edited by Moderator Marissa to update platform capability tags****
Pegasystems Inc.
IN
Hi,
It looks like its not space, It is horizontal tab which is der in the URL. If you want to then your should replace \t from the URL. Can you please let me know the SR number which is raised for this Use case.