tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Bill Barker" <wbar...@wilshire.com>
Subject Re: [PROPOSAL] Proposed integration of Coyote in 4.0-HEAD
Date Wed, 13 Mar 2002 06:33:04 GMT

----- Original Message -----
From: "Remy Maucherat" <remm@apache.org>
To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
Sent: Tuesday, March 12, 2002 9:26 PM
Subject: Re: [PROPOSAL] Proposed integration of Coyote in 4.0-HEAD


> > on 3/12/02 6:30 PM, "Remy Maucherat" <remm@apache.org> wrote:
> >
> > > A) URI decoding refactoring. To avoid doing some URI decoding in many
> places
> > > in the pipeline, a decodedURI field (with associated getter/setter)
> should
> > > be added in the HttpRequest interface, and used in the Catalina
> pipeline.
> > > This also has the advantage to guarantee that no double URI decoding
> occurs
> > > (which can lead to URI-based security attacks).
> > >
> > > <ballot>
> > > [ ] +1
> > > [ ] +0
> > > [ ] -1:
> > >
> > > </ballot>
> >
> > Q: How can you modify the Servlet API interfaces?
>
> Well, it's not Http*Servlet*Request ;-)
> It's the internal Catalina API, and I'm just proposing to add a method to
it
> (servlets can't access it, but components of the Catalina core can).
>

+1 by the way.

Jon is confusing issues here.  The "encoding" here refers to URLs like:
/foobar/%3F.jsp

The methods request.encodeURL(...) work (much/exactly) the same in Coyote
4.x and 3.x as they did before.

> Remy
>
>
> --
> To unsubscribe, e-mail:
<mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
<mailto:tomcat-dev-help@jakarta.apache.org>
>


--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>


Mime
View raw message