if not separator is found in url, clean decoded_query_string (#12266)

1 files changed, 3 insertions, 0 deletions

diff --git a/web/server/web_client.c b/web/server/web_client.c
index 6152ad1491..c1510cd3e4 100644
--- a/web/server/web_client.c
+++ b/web/server/web_client.c
@@ -1076,6 +1076,9 @@ static inline HTTP_VALIDATION http_request_validate(struct web_client *w) {
                         if (url_parse_query_string(w->decoded_query_string, NETDATA_WEB_REQUEST_URL_SIZE + 1, ptr_variables, total_variables)) {
                             return HTTP_VALIDATION_MALFORMED_URL;
                         }
+                    } else {
+                        //make sure there's no leftovers from previous request on the same web client
+                        w->decoded_query_string[1]='\0';
                     }
                 }
                 *ue = ' ';