tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 21939] New: - Coyote JK 2 outputs request parameters
Date Mon, 28 Jul 2003 17:59:24 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21939>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21939

Coyote JK 2 outputs request parameters

           Summary: Coyote JK 2 outputs request parameters
           Product: Tomcat 4
           Version: 4.1.24
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Other
         Component: Connector:Coyote JK 2
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: klavergne@digitalrice.com


The Coyote JK 2 connector is dumping all request parameters to the console when 
a request goes through it. It dumps them in a hex mode, but they are still 
there. It is important to be able to turn this off, especially when the user of 
a web application enters a password on a form field.

I did some initial debugging and found the problem in org.apache.jk.common.
MsgAjp in the dump(String) method. On line 345 a call to System.out.println is 
being made to output the reqest parameters. A possible correction would be to 
make this a call to log.debug() or log.trace() so that it would use the logging 
configuration instead of outputting this all the time.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Mime
View raw message