Rewrite rules are not working in IE

[Yeming Profile]

Hi,

For info security purpose, we want to remove the "<" or ">" from the search query url. So we put these code in the ISAPI_Rewrite 3.0 httpd.conf file.

RewriteCond %{REQUEST_URI} ^(.*SearchResults*.*).*$ [NC]
RewriteCond %{QUERY_STRING} ^.*(?:%3C|%2F|%3E).*$ [NC]
RewriteRule /(.*)\?(.*)query.*$ /$1\?$2query=BadRequest [NC]

However, these code only working for Chrome and Firefox, but not for IE.

How should I modify the code?

Thank you and Regards!

Yeming

[Yaroslav]

Hello.

I suppose because IE is not encoding these characters. You can modify your rule like this:

RewriteCond %{REQUEST_URI} ^(.*SearchResults*.*).*$ [NC]
RewriteCond %{QUERY_STRING} ^.*(?:%3C|%2F|%3E|<|>).*$ [NC]
RewriteRule /(.*)\?(.*)query.*$ /$1\?$2query=BadRequest [NC]