weather.data.gov long url being blocked by WAF

[adborden]

This error is showing up in the logs of the WAF. It looks like url parameters are being accidentally appended to the URL.

Apr 30 15:07:43 <local0.info> 10.177.16.94 04/30/2019:15:07:43 GMT  0-PPE-1 : default APPFW APPFW_BUFFEROVERFLOW_URL 3815053202 0 :  23.95.91.237 287970607-PPE1 QlIUGsNsqhQAvhGA9cgBqKlJsF80001 Gsa-AWS-Waf-Global-Basic URL length(3129) is greater than maximum allowed(3072): https://weather.data.gov/page/601/?app_agency=hhs-gov%2Fduplicate-entries-removed-from-data-gov-catalog%2Fduplicate-entries-removed-from-data-gov-catalog%2Fduplicate-entries-removed-from-data-gov-catalog%2Fduplicate-entries-removed-from-data-gov-catalog%2Fbird_data_info%2Fbird_data_info%2Fbird_data_info%2Fbird_data_info%2Finvasives2018%2Fp24907817%2Fp24907817%2Fp24906752%2Fp249067 <blocked>

How to reproduce

1. Description of steps to reproduce the issue.

Expected behavior

Actual behavior

[jbrown-xentity]

We can't control our end users bad URL's. Closing this.