s＞/＜s＞.css?12345‘“\‘\“)；|]*%00{%0d%0a＜%00＞%bf%2项目检测问题Application error message

问题描述：Application error message

Acunetix Security Audit 使用工具扫描项目时扫描出来的问题

 Web Server
Details
Path Fragment input /[*]/<s>/<s>-<n>.<n>/<s>/<s>/<s>.css was set to 12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
Pattern found:
java.lang.Thread.run(Thread.java:748)

解决手段：tomcat9以上

添加两个配置参数

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" 
			   relaxedQueryChars="[]|{}^\`"<>" 
			   relaxedPathChars="[]|{}^\`"<>" />
			   ```