tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Tomcat 7 - No modifications are allowed to a locked ParameterMap
Date Thu, 03 May 2012 15:17:28 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Konstantin,

On 5/3/12 9:23 AM, Konstantin Kolinko wrote:
> One more tip: run with
> "org.apache.catalina.connector.RECYCLE_FACADES=true"

RequestFacade is a fairly lightweight object: it's only got a single
(reference) member so it's weight is something around 3 or 4 times the
size of a pointer.

Why isn't this setting enabled by default? Generating 32 bytes of
garbage during a request is fairly trivial and, as you say, improves
security (for a broken webapp) and helps identify apps that improperly
store the request somewhere like this.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+ioYgACgkQ9CaO5/Lv0PAVTACfXAtdih/SX5QKxeRNc9kBPj2j
1l0AniBXEOO3w8kDtzmIjBUIke+CoCea
=Ae+p
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message