create rules in ids to alert on strange unicode request

How would you protect from these attacks?