The valid characters are defined in RFC 7230 and RFC 3986

If you use an upper version of Tomcat 8.5 it throws this exception if the URL path contains ‘[‘ and ‘]’. For older versions, it works.