Sometimes the URLs are mangled multiple times, e.g.,
https://urldefense[.]us/v2/url?u=https-3A__urldefense[.]com_v3_
It used to be the case that if a URL already had the form of http://urldefense[.]com/..., the middlebox wouldn't touch it (though would it change any of the user/org-based parameters?).
This behavior could be the result of migrating from (or incorporating) their multiple domains or the mixing of v3 and v2 versions.
The solution for now should be to recursively decode until the URL is clean, up to some limit (maybe 5?).
Sometimes the URLs are mangled multiple times, e.g.,
It used to be the case that if a URL already had the form of
http://urldefense[.]com/..., the middlebox wouldn't touch it (though would it change any of the user/org-based parameters?).This behavior could be the result of migrating from (or incorporating) their multiple domains or the mixing of
v3andv2versions.The solution for now should be to recursively decode until the URL is clean, up to some limit (maybe 5?).