ICAP LDAP Authentication Does Not Support "<" and ">" characters in the password.

Issue:

If an LDAP user's password includes the < or > characters, the application blocks those characters to prevent XSS (Cross-Site Scripting) attacks. This affects BIND user credentials and surfaces as an error during Test Connection testing.

Solution:

ICAP Server V5.14.0, expected at the end of June 2026, will resolve this issue and add full support for < and > in LDAP authentication passwords.

In the meantime, LDAP authentication users must avoid using < or > as special characters in their passwords.