fun fact, we use a handful of canned regexes for command injection/dir traversals to handle dumb things like this.

Good news, URL encoding in the URI is processed by Suricata automatically.

request body regex absolutely needs to be able to handle regular formatted and URL encoding, though.