Defect #18201: Internal server error (500): invalid byte sequence in UTF-8 - Redmine

Actions

Defect #18201

open

Status:

New

Priority:

Low

Assignee:

Category:

Target version:

Start date:

Due date:

% Done:

Estimated time:

Resolution:

Affected version:

Description

Hi, tonight my local Redmine instance (2.6.0) was visited by YandexBot with an invalid URL:

/login?%BB%A1%20%AA%13%BD%F4%06r

For this input Redmine returned the following error message:

ArgumentError: invalid byte sequence in UTF-8

The reason seems to be an invalid UTF-8 encoding which Rails can not decode successfully. After short googling, I successfully added a gem which tries to sanitize such URLs by replacing invalid bytes (https://github.com/sunny/handle_invalid_percent_encoding_requests, based on discussion http://stackoverflow.com/questions/24648206/ruby-on-rails-invalid-byte-sequence-in-utf-8-due-to-bot), and it works for the above link.

Maybe there is even a better solution, but I think it would be favourable to make Redmine more robust either way.

Regards,
Björn

Actions

Also available in: Atom PDF