Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 8.5 Security Technology Implementation Guide
  6. Application STIG
  7. IISW-SI-000228: Non-ASCII characters in URLs must be prohibited

IISW-SI-000228: Non-ASCII characters in URLs must be prohibited

Non-ASCII characters in URLs must be prohibited by any IIS 8.5 website.
To check compliance with IISW-SI-000228, complete the following steps:
  1. Open the IIS 8.5 Manager.
  2. Click website name.
  3. Double-click the
    Request Filtering
     icon.
  4. In the
    Actions
     pane, click
    Edit Feature Settings
    .
  5. Verify that the
    Allow high-bit characters
     check box is not selected.
If the
Allow high-bit characters
 check box is selected, your application is not compliant.
If the website has operational reasons to set
Allow high-bit characters
, this vulnerability can be documented locally by the ISSM/ISSO.
If your application is not compliant, complete the following steps for each site hosted on the IIS 8.5 web server:
  1. Open the IIS 8.5 Manager.
  2. Click the website name.
  3. Double-click the
    Request Filtering
     icon.
  4. In the
    Actions
     pane, click
    Edit Feature Settings
    .
  5. Deselect the
    Allow high-bit characters
     check box.