SpringBoot 提示：RequestRejectedException:The request was rejected because the URL was not normalized.

「爱情、让人受尽委屈。」 2023-10-10 13:42 117阅读 0赞

今天遇到一个问题：本地磁盘通过SpringMVC 资源映射成URL地址可以访问的资源，提示如下错误信息：

> RequestRejectedException:The request was rejected because the URL was not normalized.

错误的大致意思：请求资源的URL地址不规范错误。

## 造成错误发生的原因 ##

由于我项目集成SpringSecurity 框架，在此框架中存在一个HttpFirewall接口。主要用于：用于拒绝潜在危险请求。

HttpFirewall继承图

![watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16][]

上述错误报错点在：StrictHttpFirewall.isNormalized()方法，主要用于：检查URL是否包含指定特殊字符./", "/../" or "/."

![watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 1][]

异常的抛出

![watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 2][]

## 解决办法: ##

指定HttpFirewall的默认实现为DefaultHttpFirewall

实列代码:

/**
    	 * HTTP 防火墙规则修改：允许URL包含双斜杠
    	 * @return
    	 */
    	@Bean
    	public HttpFirewall allowUrlEncodedSlashHttpFirewall() {
    		return new DefaultHttpFirewall();  
    	}

![watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_15_color_FFFFFF_t_70_g_se_x_16][]

[watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/927d5bd298634e90aa3e1c2e38cb304e.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 1]: https://img-blog.csdnimg.cn/cf57891715e54315bce7b886e2df93a2.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 2]: https://img-blog.csdnimg.cn/aca2d50963a04057ab8d72337945fb70.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_d3F5LXplbmhlaQ_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_15_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/101497ffea5c493384a00c423d966c3e.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT,size_15,color_FFFFFF,t_70,g_se,x_16