https://bz.apache.org/bugzilla/show_bug.cgi?id=64483
Bug ID: 64483
Summary: AJP connector allowedRequestAttributesPattern failures
not logged
Product: Tomcat 9
Version: unspecified
Hardware: PC
OS: All
Status: NEW
Severity: enhancement
Priority: P2
Component: Connectors
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: -----
If a request fails the allowedRequestAttributesPattern check a 403 is returned
for the request but nothing is visible in the default logging.
This check should only fail as a result of server mis-configuration or
malicious action. Both cases would benefit from something in the server logs
even if only to help people find the right part of the documentation to look
at.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
