private boolean containsEncodedPeriods(String uri) {
        if (isBlockEncodedPeriod()) {
            return PERIOD.stream().anyMatch(uri::contains);
        }
        return false;
    }
A request filter that blocks malicious requests. Invalid request will respond with a 400 response code.
<p>
This filter checks and blocks the request if the following characters are found in the request URI:
<ul>
    <li>Semicolon - can be disabled by setting {@code blockSemicolon = false}</li>
    <li>Backslash - can be disabled by setting {@code blockBackslash = false}</li>
    <li>Non-ASCII characters - can be disabled by setting {@code blockNonAscii = false},
         the ability to disable this check will be removed in future version.</li>
    <li>Path traversals - can be disabled by setting {@code blockTraversal = false}</li>
</ul>

@see <a href="https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/web/firewall/StrictHttpFirewall.html">
This class was inspired by Spring Security StrictHttpFirewall</a>
@since 1.6
web/src/main/java/org/apache/shiro/web/filter/InvalidRequestFilter.java