https://bz.apache.org/bugzilla/show_bug.cgi?id=60594

--- Comment #3 from Coty Sutherland <csuth...@redhat.com> ---
Created attachment 34684
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=34684&action=edit
patch proposal

In response to the numerous complaints on the users list I decided to give this
a shot. I added a system property which contains a blacklist that's used for
validation of request targets rather than the long if statement that was there.
If a users needs to allow unencoded | characters then they can just remove it
from the blacklist defined in the tomcat.util.http.parser.HttpParser.blacklist
property.

If this looks good to everyone I can push it to whichever versions of tomcat we
want to allow an option for.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to