I recently noticed that some people accidentally will use special characters at the end of a URL to link to a site. Example: .html%C2%A0
Some people will also try to inject escape sequences like \x18\xbaL\x03@\xea$\x03HZm (known apache vulnerability) to hack your Apache server
So, my question is wouldn't it be smart to disallow any characters after .html and simply rewrite it? Wouldn't that make it more difficult to inject anything into an URL?
I haven't tested the rule yet, but it will look similar to this in the end:
RewriteRule (.*)\.html.+ /$1\.html [R=301,L]