From e22b3ccb970ff6917322ec594496c2c2647a05db Mon Sep 17 00:00:00 2001
From: jonmv <venstad@gmail.com>
Date: Mon, 11 Apr 2022 10:45:43 +0200
Subject: Avoid segment validation in rule based filter

---
 .../yahoo/jdisc/http/filter/security/rule/RuleBasedRequestFilter.java   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'jdisc-security-filters/src/main/java/com')

diff --git a/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/rule/RuleBasedRequestFilter.java b/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/rule/RuleBasedRequestFilter.java
index fb384a3f980..88a241b8196 100644
--- a/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/rule/RuleBasedRequestFilter.java
+++ b/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/rule/RuleBasedRequestFilter.java
@@ -118,7 +118,7 @@ public class RuleBasedRequestFilter extends JsonSecurityRequestFilterBase {
             boolean methodMatches = methods.isEmpty() || methods.contains(method.toUpperCase());
             String host = uri.getHost();
             boolean hostnameMatches = hostnames.isEmpty() || (host != null && hostnames.contains(host));
-            Path pathMatcher = new Path(uri);
+            Path pathMatcher = Path.withoutValidation(uri);
             boolean pathMatches = pathGlobExpressions.isEmpty() || pathGlobExpressions.stream().anyMatch(pathMatcher::matches);
             return methodMatches && hostnameMatches && pathMatches;
         }
-- 
cgit v1.2.3