Re: ServletRequest.getInputStream, getReader, getParameter.

Ok, thank you for the clear response. I see the problem with file type elements. 2015-11-23 17:18 GMT+01:00 André Warnier (tomcat) : > On 23.11.2015 16:31, Mark Thomas wrote: > >> On 23/11/2015 14:30, Roel Storms wrote: >> >>> Hello, >>> >>> I am working on a Valve that does

Re: Modsecurity - REQBODY ERROR

On 23.11.2015 10:52, Yogesh Patel wrote: In modsecurity we have a rule below: "SecRule REQBODY_ERROR "!@eq 0" \ "id:'21', phase:2,t:none,log,deny,status:400,msg:'Failed to parse request body.',logdata:'%{reqbody_error_msg}',severity:2" in mod security log following error message is

Re: Source IP filtering on some URLs before Container-managed authentication

Andre, On 20.11.2015 17:44, André Warnier (tomcat) wrote: Well, you can use a lot more conditions in urlrewrite filter, such as a client IP + URL patterns + lots more. And you can combine them using the type="next". Your original post said "My webapp have a set of resources, let's call that

Modsecurity - REQBODY ERROR

In modsecurity we have a rule below: "SecRule REQBODY_ERROR "!@eq 0" \ "id:'21', phase:2,t:none,log,deny,status:400,msg:'Failed to parse request body.',logdata:'%{reqbody_error_msg}',severity:2" in mod security log following error message is detected: "Message: Access denied with code 400

Fwd:

Hello, I am using tomcat 8.0.22.0 Language: Java development: Windows, NetBeans. deployment: ec2 linux I am still having trouble understanding/working with "path" and "docBase" of context element. I have two questions: First of all, I have a context.xml file in the WEB-INF folder of my

ServletRequest.getInputStream, getReader, getParameter.

Hello, I am working on a Valve that does some integrity checking on HTTP requests (the details aren't important) where I need this valve to have access to the HTTP request body as well. I used request.getInputStream to fetch the data. However when a web application makes use of my valve, the

Re: ServletRequest.getInputStream, getReader, getParameter.

On 23.11.2015 21:14, Roel Storms wrote: Ok, thank you for the clear response. I see the problem with file type elements. If you really have an overwhelming need to pre-check whole POST bodies before passing them to a Tomcat application, you may want to think about fronting your Tomcat server

RE: Tomcat Conflicting with Group Policy Client

I did some testing with the PostgreSQL max_connections parameter this afternoon, but this does not solve our problem unfortunately. Set max_connections to 300 (was 100), and rebooted the server. Verified that gpupdate is unable to complete if PostgreSQL is able to communicate with Tomcat.

Re: ServletRequest.getInputStream, getReader, getParameter.

On 23/11/2015 14:30, Roel Storms wrote: > Hello, > > I am working on a Valve that does some integrity checking on HTTP requests > (the details aren't important) where I need this valve to have access to > the HTTP request body as well. I used request.getInputStream to fetch the > data. However

Re: ServletRequest.getInputStream, getReader, getParameter.

On 23.11.2015 16:31, Mark Thomas wrote: On 23/11/2015 14:30, Roel Storms wrote: Hello, I am working on a Valve that does some integrity checking on HTTP requests (the details aren't important) where I need this valve to have access to the HTTP request body as well. I used

Re: ServletRequest.getInputStream, getReader, getParameter.

2015-11-23 16:31 GMT+01:00 Mark Thomas : > On 23/11/2015 14:30, Roel Storms wrote: > > Hello, > > > > I am working on a Valve that does some integrity checking on HTTP > requests > > (the details aren't important) where I need this valve to have access to > > the HTTP request

Re:

Update regarding my second question below...The first question is still valid as is and I am still interested in input. On Mon, Nov 23, 2015 at 3:38 PM, Yuval Schwartz wrote: > Hello, > > I am using tomcat 8.0.22.0 > Language: Java > development: Windows, NetBeans. >