Forbidden You don't have permission to access

问题:

I am supporting a java application which has a search bar which matches the keywords and gets the results from the cache.

The application runs in Tomcat and has a Apache web server too.

There is an issue while searching aaa' the special character ' is causing the problem and i get to

Forbidden You don't have permission to access /xx/xx/xxxx.jsp

The search is fine in local setup with the abscence of Web Server. As i saw some posts suggesting the issue could be caused by Web server config.

What are the possibilities?

Your help is highly appreciated.

Thanks, Nagaraja JB

回答1:

Apache web-server's security configuration must be causing this. Look into the web server logs, you will find rule code/name which is triggered because of these sequence of characters. Disabling rule is one of the options to make this work but not always a good idea.

回答2:

The issue was not an issue it is a secutity constraint by the apache web server or FireWall rule to protect from cross site sctipting or sql injection using %27 (single quote). I used POST method instead of using GET method to send request. That is the solution for my case.