Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of ganesh.dhaksh@gmail.com
 designates 209.85.212.45 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <4EF4E4F4.8010301@apache.org>
References: 
 <CAAMLS7iae-jA7TO5yR=WbNFijuJL=z-v52R19nJQ5t9HJExRUg@mail.gmail.com>
 <CAAMLS7i-ojhVTs_kY9ynxKU94ZKMwsnEiUn3ArvhHCcY+WrcUg@mail.gmail.com>
 <4EF4E4F4.8010301@apache.org>
From: Ganesh Dhakshinamurthy <ganesh.dhaksh@gmail.com>
Date: Fri, 23 Dec 2011 16:21:24 -0500
Message-ID: 
 <CAAMLS7iJ5gLtcuHVe8xw47zH0pM0t0Z1yoWxf4S7Kh5=NJzYCQ@mail.gmail.com>
Subject: Re: Tomcat CsrfPreventionFilter - LRU Cache
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=bcaec5016555027ea104b4c901e1

--bcaec5016555027ea104b4c901e1
Content-Type: text/plain; charset=ISO-8859-1

Hello Mark
Thanks for the info.

- Ganesh

On Fri, Dec 23, 2011 at 3:30 PM, Mark Thomas <markt@apache.org> wrote:

> On 23/12/2011 19:45, Ganesh Dhakshinamurthy wrote:
> >>
> >> Hi
> >> I recently came across an issue reported regarding the LRU
> >> cache implementation in CsrfPreventionFilter. It was reported that FIFO
> was
> >> implemented instead of LRU. We are facing an issue in our application
> due
> >> this, [Nonce tokens getting rejected]. I searched in the bugs database
> to
> >> check if this was reported, but couldn't find any. Can somebody please
> let
> >> me know if this is a known issue and something is on the works to fix
> it?
>
> The last time it came up, no conclusion was reached as to which is the
> best approach: LRU or FIFO. There are arguments for both which probably
> means it really needs to be configurable.
>
> Mark
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

--bcaec5016555027ea104b4c901e1--