tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ignacio J. Ortega" <>
Subject RE: Maximum url length
Date Thu, 07 Feb 2002 15:31:53 GMT
> El Mar 05 Feb 2002 20:12, escribiste:
> > Hi,
> > It's not a good idea. Try changing GET to POST. In case you 
> don't know -
> > request uris are often cached, logged, etc, so sending any 
> data, especially
> > passwords in them is a suicide or worse.
> >
> I compound the uri internally in my servlet, encode it and do 
> a POST. In fact 
> tomcat shows me the doPost.

But you are not using the body for POST data you are using the URL to
send data, from a HTML perspective it's easy to send post data, simply
send a form with POST method, and you will be sending a request with an
unbounded body of data to be received by the server.., using URLS for
that is guaranteed to be a problem.... depending in incontrollable
devices ( like proxies or caches or whatever ) it's possible that some
of this uknown devices have a URL limited size, and thus there will be
clients not being able to use your app..

> The question is: I KNOW that I'm using method POST and I know 
> the generated 
> uri is very long. Have you ever try to send so long uris? How 
> to treat them? 
> Can tomcat be configured to handle longer uris?

One alternative solution could be to use Tomcat behind a WebServer .. i
dont know.

But actually the problem is more in the way you are doing things than in
the TC itself..

Saludos ,
Ignacio J. Ortega

To unsubscribe:   <>
For additional commands: <>
Troubles with the list: <>

View raw message