Re: Proposed changes to UDecoder.ALLOW_ENCODED_SLASH

2020-03-16 Thread Mark Thomas
On 14/03/2020 10:08, Oleg Kalnichevski wrote: > I am not really qualified to comment on the proposal but as far as I > can see it makes sense. > > Client side libraries however have an extra problem to contend with. > > Most of the time HttpClient just passes the request URI to server as >

Re: Proposed changes to UDecoder.ALLOW_ENCODED_SLASH

2020-03-14 Thread Oleg Kalnichevski
On Fri, 2020-03-13 at 16:02 +0100, Michael Osipov wrote: > Am 2020-03-13 um 15:35 schrieb Mark Thomas: > > Hi all, > > > > I am writing this up as this is a change I'd like to make in Tomcat > > 10 > > that I think is important to get right. It may also get back- > > ported. > > > > This first

Re: Proposed changes to UDecoder.ALLOW_ENCODED_SLASH

2020-03-13 Thread Michael Osipov
Am 2020-03-13 um 15:35 schrieb Mark Thomas: Hi all, I am writing this up as this is a change I'd like to make in Tomcat 10 that I think is important to get right. It may also get back-ported. This first arose in this mod_jk bug: https://bz.apache.org/bugzilla/show_bug.cgi?id=62459 Ignoring

Proposed changes to UDecoder.ALLOW_ENCODED_SLASH

2020-03-13 Thread Mark Thomas
Hi all, I am writing this up as this is a change I'd like to make in Tomcat 10 that I think is important to get right. It may also get back-ported. This first arose in this mod_jk bug: https://bz.apache.org/bugzilla/show_bug.cgi?id=62459 Ignoring the mod_jk aspects for now (they will come