From users-return-268851-archive-asf-public=cust-asf.ponee.io@tomcat.apache.org Fri Nov 29 10:32:34 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 92706180657 for ; Fri, 29 Nov 2019 11:32:34 +0100 (CET) Received: (qmail 98466 invoked by uid 500); 29 Nov 2019 10:32:30 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 98455 invoked by uid 99); 29 Nov 2019 10:32:30 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 29 Nov 2019 10:32:30 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 198E11813E9 for ; Fri, 29 Nov 2019 10:32:30 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.499 X-Spam-Level: X-Spam-Status: No, score=0.499 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, KAM_NUMSUBJECT=0.5, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id s2l3sxGWy0xh for ; Fri, 29 Nov 2019 10:32:27 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.167.176; helo=mail-oi1-f176.google.com; envelope-from=bindal.kushagra@gmail.com; receiver= Received: from mail-oi1-f176.google.com (mail-oi1-f176.google.com [209.85.167.176]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id A6C2ABC533 for ; Fri, 29 Nov 2019 10:32:27 +0000 (UTC) Received: by mail-oi1-f176.google.com with SMTP id o12so25627695oic.9 for ; Fri, 29 Nov 2019 02:32:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=98XhjSyBUxnxqFF5ro36Rf4VTTYvJ+fsqC5LZc0G0Ko=; b=id25lB8ElC2k7O1GABm8ab6u9+Vs7AOedceRrOrvNSWR8ZCz1ToF+eLfvuKSEC9hKd 5wThBSuu0TaPC7HaOgUeeveuo4koSxfUSOMCO61HqcbUndje6/xrTq9gSz8Vp0tC7kDh JtI+lnPkIyTlUY70hHP7Htd3ukhl65fg1eVUBvJIr+uC5T6PEfCMRLUG5FIsANlBi10L FX4NlDHALYv42/v3+99ORg1rN33tZzW3WqUaq2HfeRGLwFOM7OewxjfW9CU4uwXjpia7 dh5P/x4CZ0fs2lH2jfyHBSEF9tOeGTDs1p5SBAxLwgntZFIgkzxFReeKGPr3WGBR3/pS wAGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=98XhjSyBUxnxqFF5ro36Rf4VTTYvJ+fsqC5LZc0G0Ko=; b=mTQO7g2LeBDCUh4wAv4hZ8LN/2BdyHxxczSlr1z+crN86FBbn+8LpdlTg2rXZvfvhh IK7ikAP9caeH/K8zw+hr47uqGu+kgJb4owxkYEgWWfKCmINFqi81gbOQUOf+eavT2Yfu hwP/85sTVVRGx9pbrbBNQj+bvHXKJjubpQ6R7mqtQTSXOWMR0VSR+H6OFb2xkq5zSwbj l7M/TB8kDYoh3w/9Sw0JtkdFGvh/hauarPc+nk4DLOdEDtcfX8eNsgWFf8hXMOWacWu0 aECCcl86fUMudiC1aHfXV8oqYK5zm9z9JduYncYBm05p/WRlm5WpPGvXeq3eC+Js1ctx 3OJQ== X-Gm-Message-State: APjAAAWjMAPscGDNPIH6xO5/Bp+WcmkwdJ/V5CtjmF4A/cAo9lbu8RVg WTGjfGny4CrbG9YRAA9UQO+MWcND9mbvTt+t6nSucA== X-Google-Smtp-Source: APXvYqwQXf8cOFjPkKuitgeG6AS3xmJvgHSaNybtlNiSNk+Wuf1PyOfwgNxujNV/BN2H5oTpzoujsa/ahXsxlNC/zyM= X-Received: by 2002:a05:6808:2d8:: with SMTP id a24mr11952501oid.127.1575023546635; Fri, 29 Nov 2019 02:32:26 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Kushagra Bindal Date: Fri, 29 Nov 2019 16:02:15 +0530 Message-ID: Subject: Re: Double Slash Support in Tomcat 9.0.27 To: Tomcat Users List Content-Type: multipart/alternative; boundary="000000000000029bd6059879bf8b" --000000000000029bd6059879bf8b Content-Type: text/plain; charset="UTF-8" Hi Mark, Thanks for providing the response. Yes, you are right that we should design our application to remove // from being used. I will plan it accordingly, for the provided solution in below. Let me try the same and I will revert back to you in case of any further queries and concerns. On Fri, Nov 29, 2019 at 2:56 PM M. Manna wrote: > HI, > > > On Fri, 29 Nov 2019 at 09:00, Kushagra Bindal > wrote: > > > Hi, > > > > We are working on upgrading our enterprise application from 8.5.24 to > > 9.0.27 version. > > > > What we have observed that in earlier version i.e. 8.5.24 we were able to > > process process a REST URI have double slash ("//") in it. > > > > But when we are upgrading it to 9.0.27 we found that now the same url > which > > was working earlier it is now throwing 404 status code. > > > > Now, the problem is that we can not remove these double slash (//) > manually > > as it is used widely. > > > > So, can someone please provide a possible solution of this issue? > > > > Tomcat processes HTTP query and URL using RFC 7230 standards. But multiple > leading forward slash support was disabled by default for good reasons. > This was done in 8.5.31 due to issues with Http Redirects involving > Servlets. > > If you must use this, you have to modify your application context to add > the override as true - the attribute is called > "allowMultipleLeadingForwardSlashInPath". > > https://tomcat.apache.org/tomcat-8.5-doc/config/context.html > > But I would sincerely recommend that you work on such designs and correct > them in your application. There is always a "way". This is one of the > reasons web applications become obsolete requires huge maintenance. > > Thanks, > > > > > -- > > Regards, > > Kushagra Bindal > > +91-9013792807 > > > -- Regards, Kushagra Bindal +91-9013792807 --000000000000029bd6059879bf8b--