We have moved our REST services behind a reverse proxy for additional security. However, any SQL where clause passed to our REST services that contain LIKE statements with percent (%) wildcards are getting blocked by the reverse proxy. Apparently this is a side-effect of the URL normalization that is performed in the reverse proxy to validate that malicious queries are not being passed. It is described under #5 here:
I am using the queryTask in the JavaScript API to construct the queries, but this problem also appears if I try to directly query the REST service. Our system administrators are reluctant to remove the Verify normalization setting in the reverse proxy. Has anyone else encountered this problem and discovered a workaround?
