My Oracle Support Banner

Oracle HTTP Server Is Decoding %2f Appearing In A Request URI (Doc ID 759416.1)

Last updated on MARCH 18, 2024

Applies to:

Oracle HTTP Server - Version to [Release AS10gR2 to AS10gR3]
Oracle HTTP Server - Version and later
Oracle WebLogic Server - Version 10.3.1 and later
Information in this document applies to any platform.


When trying to access a URL that has / as escaped forward slash, Oracle HTTP server always un-escape the character. As a result of this behavior a 404 error is returned to the web browser as the modified url does not exist on the server.

The issue can be reproduced at will with following steps:

1. Create a html page named as below in htdocs directory: test/hello.html
2. Type in url http://hostname.domain/test/hello.html in a browser and the OHS returns 404. The log file of HTTP server shows the url has been unescaped to http://hostname.domain/test/hello.html




To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.