tomcat请求参数问题解决: Invalid character found in the request target. The valid characters are defined in

背景：研发的同事在测试环境的tomcat发现了一个问题，

‘Note: further occurrences of HTTP header parsing errors will be logged at DEBUG level.’但是线上没有任何问题。所以检查生产环境发现了问题。

处理：生产环境使用的6版本tomcat，测试使用8版本tomcat

在网上查找了一圈，找到了一遍文章，所以记录一下

错误还原:

今天升级tomcat7.0.84遇到一个问题:url请求中包含{}的都报错:

二月 06, 2018 5:25:39 下午 org.apache.coyote.http11.AbstractHttp11Processor process
信息: Error parsing HTTP request header
 Note: further occurrences of HTTP header parsing errors will be logged at DEBUG level.
java.lang.IllegalArgumentException: Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986
    at org.apache.coyote.http11.InternalInputBuffer.parseRequestLine(InternalInputBuffer.java:192)
    at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1028)
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:745)

前台的请求及报错如下:


Failed to load resource: the server responded with a status of 400 (Bad Request)


http://localhost:8080/XXX/formshow/show.jsp?formId=1222&processFormType=CREATE&formUsage=INPUT&initData={%22flowId%22:%22180206172500073%22,%22flowTypeId%22:%228%22,%22flowType%22:%22WFM%22,%22processNameEn%22:%22com.inspur.plugins.ge.process.GenerateElectricity%22,%22processNameZh%22:%22GE%22,%22processPluginName%22:%22ge%22,%22formType%22:%22JSP%22,%22version%22:%221.1.1%22,%22jspformService%22:%22generateElectricityCreateJspFormService%22}

问题分析:

错误代码 400 请求参数有误：

升级tomcat之后就出现了这个问题，Invalid character found in the request target. The valid characters are defined in RFC 7230 and RFC 3986，也就是说我们的请求中用了无效的字符。查看RFC规范知,url中只允许包含英文字母(a-zA-Z)、数字(0-9)、-_.~四个特殊字符以及保留字符( ! * ’ ( ) ; : @ & = + $ , / ? # [ ] ) (26*2+10+4+18=84)这84个字符.而我们的请求中出现了{}大括号,所以tomcat报错.

解决办法(四种):

替换url请求。不用{}
对请求编码解码。 UrlDecode、UrlEncode
配置Tomcat对字符的支持 (见下文)
更换Tomcat版本 (注,Tomcat从 7.0.73, 8.0.39, 8.5.7 版本后添加了对Url的限制。)
- 配置tomcat支持|{}等字符的方法是:在 catalina.properties中添加 tomcat.util.http.parser.HttpParser.requestTargetAllow=|{} 但是只支持7.0.76, 8.0.42, 8.5.12 之后的版本(这些版本之后支持设置上述属性)
- 注,Tomcat从 7.0.73, 8.0.39, 8.5.7 版本后添加了对Url的限制。