{"id":9486,"date":"2022-05-10T06:43:37","date_gmt":"2022-05-10T06:43:37","guid":{"rendered":"https:\/\/cpanelplesk.com\/wp62\/?p=9486"},"modified":"2022-05-10T06:43:37","modified_gmt":"2022-05-10T06:43:37","slug":"what-is-url-normalization-in-cloudflare","status":"publish","type":"post","link":"https:\/\/cpanelplesk.com\/wp62\/what-is-url-normalization-in-cloudflare\/","title":{"rendered":"What is URL Normalization in Cloudflare?"},"content":{"rendered":"

Cloudflare has a URL normalization tool that may be used to change the URLs of incoming requests to conform to a uniform formatting standard. <\/span>Enabling URL normalization, in other words, guarantees that incoming URLs are normalized before being sent on to other Cloudflare edge features that accept URL input. <\/span>Furthermore, regardless of the original incoming URL, the rule expressions responsible for filtering traffic according to URLs will perform seamlessly.<\/span><\/p>\n

If the URL normalization option is not enabled, Cloudflare will forward the URL in its original form. This could lead to ERROR.<\/span><\/p>\n

How does URL Normalization in CloudFlare Work?<\/span><\/h2>\n

Incoming URLs are normalized by changing encoded elements, separators, and literal bytes to ensure they follow a consistent formatting standard. <\/span>We have a Firewall Rule set up to prevent all requests that match www.example.com\/hello. This constraint, however, is insufficient to prevent a request with an encoded element, such as www.example.com\/ percent 76ello.<\/span><\/p>\n

Fortunately, the Cloudflare Firewall Rules expressions that use URLs are easier by normalizing the incoming URLs.<\/span><\/p>\n

The following characters are percent decoded according to RFC-3986:<\/span><\/p>\n

    \n
  1. Characters in the alphabet: a-z, A-Z.<\/span><\/li>\n
  2. The following characters are not encoded or decoded: 0-9 hyphen \u2013, period., underscore _, and tilde # [] @! $ &'() * +, ; =: \/?<\/li>\n
  3. Other characters, such as literal byte values, are encoded in percent.<\/li>\n
  4. Remove Dot Segment protocol is used to normalize URL paths.<\/li>\n<\/ol>\n

    In addition to RFC-3986, Cloudflare can use the following additional techniques:<\/span><\/p>\n