In IIS, there is this attribute inside requestFiltering: allowDoubleEscaping
description:
Optional Boolean attribute.
Specifies whether to allow URLs with double escape characters.
The default value is false.
===========================
What characters can be escaped twice in a request? Thanks for your help.