Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. BlackBerry AtHoc 7.9
  4. Installation and Configuration Guide
  5. IIS 8.5 Security Technology Implementation Guide
  6. Application STIG
  7. IISW-SI-000228: Non-ASCII characters in URLs must be prohibited

IISW-SI-000228: Non-ASCII characters in URLs must be prohibited

Non-ASCII characters in URLs must be prohibited by any IIS 8.5 website.
To check compliance with IISW-SI-000228, complete the following steps:
  1. Open the IIS 8.5 Manager.
  2. Click website name.
  3. Double-click the 
    Request Filtering 
    icon.
  4. In the Actions pane, click 
    Edit Feature Settings
    .
  5. Verify that the 
    Allow high-bit characters
     check box is not selected.
If the 
Allow high-bit characters
 check box is selected, your application is not compliant.
If the website has operational reasons to set 
Allow high-bit characters
, this vulnerability can be documented locally by the ISSM/ISSO.
If your application is not compliant, complete the following steps for each site hosted on the IIS 8.5 web server:
  1. Open the IIS 8.5 Manager.
  2. Click the website name.
  3. Double-click the 
    Request Filtering 
    icon.
  4. In the Actions pane, click 
    Edit Feature Settings
    .
  5. Deselect the 
    Allow high-bit characters
     check box.