Bypassing CloudFront WAF with URL‑Encoded /actuator Path
CloudFront WAF blocks the "/actuator" endpoint, but by URL‑encoding each character as "%61%63%74%75%61%74%6f%72" you can evade the rule and directly access the Spring Boot actuator interface.
CloudFront WAF blocks the "/actuator" endpoint, but by URL‑encoding each character as "%61%63%74%75%61%74%6f%72" you can evade the rule and directly access the Spring Boot actuator interface.
This article explores how a quirky snake game runs inside a browser’s address bar, the technical tricks behind it, and how recent security and API changes in modern browsers have turned such creative hacks into fragile experiments, highlighting the tension between innovation and safety.
This article explains why URL encoding is essential for transmitting data with special or non‑ASCII characters, demonstrates how to use PHP’s urlencode (and rawurlencode) functions with example code for both English and Chinese strings, and highlights practical considerations such as space handling.
URL encoding ensures safe transmission of special and non‑ASCII characters in web requests, and PHP's built‑in urlencode function—illustrated with both English and Chinese examples—demonstrates how to encode strings, handle spaces, and use rawurlencode when a %20 representation is required.
This article explains how PHP's urlencode() and urldecode() functions work, shows their syntax and practical code examples, compares them with rawurlencode()/rawurldecode(), and discusses when to use each function to correctly handle special characters in URLs during web development.
This article explains how PHP's urlencode function encodes special and non‑ASCII characters in URLs, provides example code for English and Chinese strings, discusses practical usage in GET requests, and notes the difference between urlencode and rawurlencode for space handling.
This article explains the importance of URL encoding for transmitting data safely on the internet, demonstrates how to use PHP's built‑in urlencode function with examples for both ASCII and non‑ASCII strings, and highlights considerations such as space handling and the alternative rawurlencode function.
This article explains how PHP's urlencode function encodes special and non‑ASCII characters in URLs, provides example code for both English and Chinese strings, and discusses practical usage considerations such as space handling and when to use rawurlencode.
This article explains how PHP's urlencode function converts special and non‑ASCII characters into URL‑safe representations, provides example code for English and Chinese strings, and discusses practical usage, space handling, and the alternative rawurlencode function for precise encoding.
This article explains how to use PHP's built-in urlencode function to safely encode URLs containing special or non‑ASCII characters, demonstrates encoding of both English and Chinese strings with code examples, discusses practical usage in GET requests, and notes the difference between urlencode and rawurlencode for space handling.
URL encoding is essential for transmitting data safely on the internet, and this article explains PHP's built‑in urlencode function, demonstrates encoding of both ASCII and non‑ASCII strings with example code, and discusses handling spaces and the alternative rawurlencode function.
An in‑depth guide shows how to decode URL‑encoded strings encountered during Python web scraping, explains the difference between two encoding formats, and provides ready‑to‑run urllib code that prints the original Chinese characters, helping developers troubleshoot similar crawling issues.
This article explains how to use Python's urllib library to decode URL‑encoded strings encountered in web crawling, walks through a real example with code, and shows the resulting decoded URL, helping developers troubleshoot common encoding issues.
This article explains the PHP http_build_query function, detailing its purpose of generating URL‑encoded query strings from arrays or objects, describing each parameter (query_data, numeric_prefix, arg_separator, enc_type), the return value, and providing multiple code examples illustrating typical usage and output.
This article explains why URLs and their parameters must be encoded during testing, covering readability, completeness, reserved characters, non‑ASCII symbols, and unsafe characters, and provides practical examples to ensure reliable data transmission and correct parameter parsing.
This article walks through improving a Java GET‑parameter concatenation utility by overloading methods, handling Chinese characters with java.net.URLEncoder, and providing reusable code for converting JSON or Map arguments into properly encoded query strings for HttpClient requests.
This article explains the differences between JavaScript's escape, encodeURI and encodeURIComponent functions, the principles of percent‑encoding, the classification of reserved, unreserved and unsafe characters, and provides an overview of ASCII, Unicode and UTF‑8 character encodings.
This article explains the differences between JavaScript’s escape, encodeURI, and encodeURIComponent functions, detailing their encoding rules, percent‑encoding standards, reserved and unreserved characters, and how Unicode characters are transformed into UTF‑8 byte sequences, while also covering ASCII, Unicode, and UTF‑8 fundamentals.
The article describes a Python requests pitfall where a JSON‑encoded parameter triggers automatic URL encoding causing request failures, explains how to work around it, and then shares a small PyPDF2 script used to split a large PDF into separate pages.
This guide shows how to install the latest Firefox and Firebug, then use the console to encode and decode URLs via JavaScript's encodeURI and decodeURI functions, including step‑by‑step commands and explanations of why the latest tools are recommended.