proofpoint-url-decoder
proofpoint-url-decoder copied to clipboard
Published
20 hours ago •
cardi
cardi
URLs mangled multiple times
Sometimes the URLs are mangled multiple times, e.g.,
https://urldefense[.]us/v2/url?u=https-3A__urldefense[.]com_v3_
It used to be the case that if a URL already had the form of http://urldefense[.]com/..., the middlebox wouldn't touch it (though would it change any of the user/org-based parameters?).
This behavior could be the result of migrating from (or incorporating) their multiple domains or the mixing of v3 and v2 versions.
The solution for now should be to recursively decode until the URL is clean, up to some limit (maybe 5?).
