StrictHttpFirewall incorrectly rejects valid CJKV characters

[rwinch]

No description provided.

[tawAsh1]

Almost LGTM. We also checked the behavior.
I was looking at other methods like setAllowUrlEncodedPercent(), how about adding setAllowUrlEncodedCRLF() with the appropriate warning document?

[rwinch]

@tawAsh1 Thank you for your feedback.

User's can always invoke getEncodedUrlBlocklist and getDecodedUrlBlocklist which allow adding and removing characters from it. The allow methods are for convenience for URL values that we felt were more likely to want to be enabled. I did not consider newlines to be likely for users to want to add/remove. However, since you requested the convenience methods, I went ahead and added them in e2eed33 Please let me know if this looks good to you.

[tawAsh1]

LGTM！ Thanks.