I have a strange behavior on an Apache server. When a parameter is set twice in the URL (ex : https://xxx.com/xxx/xxx.cgi?toto=1&toto=1), i get a 403 error from Apache.
I know mod_security is installed on this server, and i think that's what is causing the problem but i can't find the rule to disable it.
?toto=1&toto=1 => 403
?toto=1&toto=2 => 403
?toto=1&titi=1 => OK