The http POST methods will use these temp locations to store the post data. Some OSs like centOS will delete the temp dir frequently. So, even you set that location’s permission, after some time that dir will be removed by the OS. And after you reboot, the temp dir will be different. You can set … Read more
According to https://tomcat.apache.org/tomcat-8.5-doc/config/systemprops.html, requestTargetAllow is deprecated. For me, the other solutions presented here did not work either. According to the Tomcat documentation I found a way to set the property relaxedQueryChars instead: @Bean public ConfigurableServletWebServerFactory webServerFactory() { TomcatServletWebServerFactory factory = new TomcatServletWebServerFactory(); factory.addConnectorCustomizers(new TomcatConnectorCustomizer() { @Override public void customize(Connector connector) { connector.setProperty(“relaxedQueryChars”, “|{}[]”); } }); … Read more