https://bz.apache.org/bugzilla/show_bug.cgi?id=62419
--- Comment #2 from Ralf Hauser <hau...@acm.org> --- To easily test whether you are affected curl -vsLH "Origin: http://evil.com" https://yourdomain.tld/ 2>&1 | grep -i access-control If you see "evil", then you are, if you see "*" you are not. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org