Hi,

URIEncoding="UTF-8" seems to be broken for 5.5.trunk at the moment. The
reason is related to one of the fixes for BZ 44494. It doesn't have to
do with the fixes for URIEncoding CVE.

6.0.18 works. For 5.5.trunk when URIEncoding="UTF-8" you always get a
redirect to the ROOT context start page if the rquest is handled by a
reycled instance of I-don't-know-yet-which-object.

So the first few rquests are handled fine, but very soon you only get
redirects back and end up in a redirect loop.

The URL doesn't need to contain any non-ASCII characters, e.g.
http://myserver:8080/ is enough for reproduction, and is also the
redirected URL.

If we revert the backport of

http://svn.eu.apache.org/viewvc/tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java?r1=642819&r2=647307&diff_format=h

then the redirect loop is gone, and the usual content gets served, but
we know, that this change was needed to fix the "remaining garbage" part
of 44494. So reverting it without any alternative is not really an option.

Regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to