arturobernalg opened a new pull request, #1108: URL: https://github.com/apache/tomcat/pull/1108
RFC 9110, section 15.5.6 requires an origin server to generate an Allow header field in a 405 response. `CGIServlet` rejected a method that it does not support, such as DELETE with the default configuration, without one. This was the last place that sent a 405 without it, now that #1103 covers `HttpServlet`. This change sends the value that `CGIServlet` already returns for an OPTIONS request. The code that builds the value is moved to a private method that both use. TestCGIServletMethodNotAllowed covers the default methods and a configured `cgiMethods` value. Both tests fail with "No Allow header" without the change. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
