Grouper Users - Open Discussion List

[Chris Hyzer <>]

> names.  He wonders if the use of the colon might run afoul of web
> application firewalls.  We don't have one as of yet, but he is
> concerned that if typical web-app firewall signatures look for
> colons it makes sense to not use something that will be flagged
> every time.  The theory is such a firewall looking for URL
> manipulation might be wary of seeing colons.

I have never heard of this issue, maybe no one is using a web application 
firewall with grouper, or maybe it is not a problem.  Are you worried about 
the UI or WS or both?  I wonder if escaping the colon in the URL would help 
(%3A).  We do have a Jira issue to support user configured folder separators 
(instead of colon), but the colon is pretty entrenched in the Grouper 
codebase, so this would not be trivial...

Thanks,
Chris