Our site experienced an interesting attack attempt. The attacker hit multiple URLs of the form:
/router/translate-path?path=some-path%2F%D051b4c001%22d051b4c001%3Dd051b4c001%25 where some-path is actually a valid Drupal path.
Eventually, we saw a rise on 500 errors triggered by this module:
Uncaught PHP Exception InvalidArgumentException: "Malformed UTF-8 characters, possibly incorrectly encoded" at /var/www/html/vendor/symfony/http-foundation/JsonResponse.php line 142
Attempt to decode the path to UTF-8 if the mbstring extension is available.
Active
2.0
Code