tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rémy Maucherat" <remy.mauche...@gmail.com>
Subject Re: %3B in path-info
Date Fri, 11 Apr 2008 10:59:19 GMT
On Fri, Apr 11, 2008 at 4:51 AM, Jess Holle <jessh@ptc.com> wrote:
>  Agreed -- but that draws me back to the need for an option (or default
> behavior!) in mod_proxy_ajp wherein the URL passed to via AJP is not
> decoded.

The thing is that it is news to me that mod_proxy_ajp passes decoded
URLs ;) I am pretty sure I was told when this security problem was
originally found (and the mod_jk default was changed as a result) that
this was not the case.

Rémy

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message