private static String decodeAndCleanUriString(HttpServletRequest request, String uri) {
        uri = decodeRequestString(request, uri);
        return removeSemicolon(uri);
    }
Decode the supplied URI string and strips any extraneous portion after a ';'.

@param request the incoming HttpServletRequest
@param uri     the application's URI string
@return the supplied URI string stripped of any extraneous portion after a ';'.
web/src/main/java/org/apache/shiro/web/util/WebUtils.java