[Bug 66194] New: When using http2 and maxHeaderSize is exceeded, nothing is logged

https://bz.apache.org/bugzilla/show_bug.cgi?id=66194 Bug ID: 66194 Summary: When using http2 and maxHeaderSize is exceeded, nothing is logged Product: Tomcat 9 Version: 9.0.63 Hardware: PC OS: Mac OS X 10.1

[tomcat] branch 9.0.x updated: Filter "Authorization" rather than "WWW-Authenticate"

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new c762775da0 Filter "Authorization" rather than

[tomcat] branch 10.0.x updated: Filter "Authorization" rather than "WWW-Authenticate"

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 11dcab795a Filter "Authorization" rather than

[tomcat] branch main updated: Filter "Authorization" rather than "WWW-Authenticate"

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new ac4c0515ef Filter "Authorization" rather than

Re: [tomcat] branch main updated: Do not include sensitive headers in responses to HTTP TRACE requests

On 01/08/2022 18:03, Christopher Schultz wrote:   private volatile boolean cachedUseLegacyDoHead; +    static { +    SENSITIVE_HTTP_HEADERS.add("cookie"); +    SENSITIVE_HTTP_HEADERS.add("www-authenticate"); How about "Authorization"? That makes more sense than

Re: [tomcat] branch main updated: Do not include sensitive headers in responses to HTTP TRACE requests

Mark, On 8/1/22 12:36, ma...@apache.org wrote: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new

[tomcat] branch 9.0.x updated: Update docs for TRACE changes

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 896c506530 Update docs for TRACE changes

[tomcat] branch 10.0.x updated: Update docs for TRACE changes

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 43226e3de5 Update docs for TRACE changes

[tomcat] branch main updated: Update docs for TRACE changes

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 9d2cebf6f3 Update docs for TRACE changes 9d2cebf6f3

[tomcat] branch 9.0.x updated: Do not include sensitive headers in responses to HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 2e447ae82e Do not include sensitive headers in

[tomcat] branch 10.0.x updated: Do not include sensitive headers in responses to HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 76cc9fe48f Do not include sensitive headers in

[tomcat] branch main updated: Do not include sensitive headers in responses to HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 7c8a605bf8 Do not include sensitive headers in

[tomcat] branch 8.5.x updated: Improve handling of HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 7524b3142e Improve handling of HTTP TRACE requests

[tomcat] branch 9.0.x updated: Improve handling of HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 233226573d Improve handling of HTTP TRACE requests

[tomcat] branch 10.0.x updated: Improve handling of HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 436a497149 Improve handling of HTTP TRACE

[tomcat] branch main updated: Improve handling of HTTP TRACE requests

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 9eb6e2a4ad Improve handling of HTTP TRACE requests

Re: Do we want to increase the default value of maxHttpHeaderSize?

Doubling might be convenient. Let's say a URI is between 4000 and 8000. There is a good chance there could be a Referer header of equal size too. Which can easily push you over the 8192 default. (and that doesn't even include the ever increasing explosion in cookie size) -Tim On Mon, Aug 1,

Re: Do we want to increase the default value of maxHttpHeaderSize?

> 2022年8月1日 20:11，Mark Thomas 写道： > > Hi all, > > RFC 9110 recommends supporting URIs of at least 8000 octets in size. > > Currently, all versions of Tomcat limit the request line and headers to 8192 > octets by default. > > The current limit is, technically, in compliance with RFC 9110

[tomcat] branch 8.5.x updated: Update documentation since RFC 9110 now allows partial PUT

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 0f64ae81b4 Update documentation since RFC 9110 now

[tomcat] branch 9.0.x updated: Update documentation since RFC 9110 now allows partial PUT

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new fa764fbd08 Update documentation since RFC 9110 now

[tomcat] branch main updated: Update documentation since RFC 9110 now allows partial PUT

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new ec5c642a7f Update documentation since RFC 9110 now

[tomcat] branch 10.0.x updated: Update documentation since RFC 9110 now allows partial PUT

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new d2d497f2c5 Update documentation since RFC 9110

Do we want to increase the default value of maxHttpHeaderSize?

Hi all, RFC 9110 recommends supporting URIs of at least 8000 octets in size. Currently, all versions of Tomcat limit the request line and headers to 8192 octets by default. The current limit is, technically, in compliance with RFC 9110 but with a ~8000 octet URI there isn't much room left

[tomcat] 01/02: Fix indent

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 0d94835b59e3d2e6b938d36ecbdd749c63694fda Author: Mark Thomas AuthorDate: Mon Aug 1 12:20:33 2022 +0100 Fix indent

[tomcat] branch 8.5.x updated (010f0eba58 -> fb71303800)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 010f0eba58 Fix corruption spotted when preparing 10.0.x release new 0d94835b59 Fix indent new fb71303800 Add

[tomcat] 02/02: Add test empty parameter - allowed by RFC 9110

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit fb71303800c32102fc9fe7c66b73ca7529e88166 Author: Mark Thomas AuthorDate: Mon Aug 1 12:31:01 2022 +0100 Add test

[tomcat] 02/02: Add test empty parameter - allowed by RFC 9110

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 2c9d5c5aa7320331f773cb96bede3bb425c9 Author: Mark Thomas AuthorDate: Mon Aug 1 12:31:01 2022 +0100 Add test

[tomcat] branch 9.0.x updated (b9a261824e -> 2c9d5c5aa7)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from b9a261824e Skip JNI tests when testing with Tomcat Native 2.x.x and later new d40cb3edbc Fix indent new

[tomcat] 01/02: Fix indent

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit d40cb3edbc9922afd3febcd68dcec65d0fcc249d Author: Mark Thomas AuthorDate: Mon Aug 1 12:20:33 2022 +0100 Fix indent

[tomcat] 01/02: Fix indent

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit f05681ce9ed6d7f2148ea56cec71871282a45348 Author: Mark Thomas AuthorDate: Mon Aug 1 12:20:33 2022 +0100 Fix indent

[tomcat] branch 10.0.x updated (375a9d7aa3 -> da3437d1a4)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 375a9d7aa3 Skip JNI tests when testing with Tomcat Native 2.x.x and later new f05681ce9e Fix indent new

[tomcat] 02/02: Add test empty parameter - allowed by RFC 9110

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit da3437d1a4c7955beb4cb7d9393d704f5c37a3af Author: Mark Thomas AuthorDate: Mon Aug 1 12:31:01 2022 +0100 Add test

[tomcat] 02/02: Add test empty parameter - allowed by RFC 9110

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 1233f5f3c2282ba50a3b4fd30cdd26416b24e12d Author: Mark Thomas AuthorDate: Mon Aug 1 12:31:01 2022 +0100 Add test empty

[tomcat] 01/02: Fix indent

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 5c6171bb2186f0d43c78ffec6610908e83a81a82 Author: Mark Thomas AuthorDate: Mon Aug 1 12:20:33 2022 +0100 Fix indent ---

[tomcat] branch main updated (72ef65020d -> 1233f5f3c2)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 72ef65020d Add a changelog entry for #532 new 5c6171bb21 Fix indent new 1233f5f3c2 Add test empty parameter -

[tomcat] branch 9.0.x updated: Skip JNI tests when testing with Tomcat Native 2.x.x and later

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new b9a261824e Skip JNI tests when testing with Tomcat

[tomcat] branch 10.0.x updated: Skip JNI tests when testing with Tomcat Native 2.x.x and later

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 375a9d7aa3 Skip JNI tests when testing with

[GitHub] [tomcat] markt-asf commented on pull request #532: Don't perform protection checks in Unix Domain Socket mode

markt-asf commented on PR #532: URL: https://github.com/apache/tomcat/pull/532#issuecomment-1201033825 Note that 8.5.x is not affected by this issue. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go

[tomcat] 01/02: Duplicate accept checks are not required in unix domain socket mode

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 8b771c81e033eedde168bba1ab028ac850a1689e Author: lihan AuthorDate: Mon Jul 18 12:52:11 2022 +0800 Duplicate accept

[tomcat] 02/02: Add a changelog entry for #532

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit cb85689a080389595e658dd79cb768129820a275 Author: Mark Thomas AuthorDate: Mon Aug 1 11:41:29 2022 +0100 Add a

[tomcat] branch 10.0.x updated (99080de72c -> cb85689a08)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 99080de72c Add release date for 10.0.23 new 8b771c81e0 Duplicate accept checks are not required in unix domain

[GitHub] [tomcat] markt-asf closed pull request #532: Don't perform protection checks in Unix Domain Socket mode

markt-asf closed pull request #532: Don't perform protection checks in Unix Domain Socket mode URL: https://github.com/apache/tomcat/pull/532 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

[GitHub] [tomcat] markt-asf commented on pull request #532: Don't perform protection checks in Unix Domain Socket mode

markt-asf commented on PR #532: URL: https://github.com/apache/tomcat/pull/532#issuecomment-1201031432 Merged manually. Thanks for the PR. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

[tomcat] 02/02: Add a changelog entry for #532

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 72ef65020d3e19f3eb670fdc4f477a240c497bf0 Author: Mark Thomas AuthorDate: Mon Aug 1 11:41:29 2022 +0100 Add a

[tomcat] 01/02: Duplicate accept checks are not required in unix domain socket mode

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit af0334e74aa920332bc5d92187db97b6094ff49a Author: lihan AuthorDate: Mon Jul 18 12:52:11 2022 +0800 Duplicate accept

[tomcat] branch main updated (c8fce99bd7 -> 72ef65020d)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from c8fce99bd7 Fix typo new af0334e74a Duplicate accept checks are not required in unix domain socket mode new

[tomcat] branch 9.0.x updated (b5ec61e01e -> 5cb0cffdbe)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from b5ec61e01e Fix typo add 942f01d938 Duplicate accept checks are not required in unix domain socket mode add

[Bug 66191] compile taglibs that are not (yet) included in jsp file

https://bz.apache.org/bugzilla/show_bug.cgi?id=66191 andreas.sta...@rmcon-int.de changed: What|Removed |Added OS||All --- Comment #1 from

[Bug 66191] New: compile taglibs that are not (yet) included in jsp file

https://bz.apache.org/bugzilla/show_bug.cgi?id=66191 Bug ID: 66191 Summary: compile taglibs that are not (yet) included in jsp file Product: Tomcat 10 Version: unspecified Hardware: PC Status: NEW

[GitHub] [tomcat-jakartaee-migration] aooohan opened a new pull request, #30: Exception in thread "main" java.util.zip.ZipException: Bad CRC checksum for entry

aooohan opened a new pull request, #30: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/30 See #29 The problem is that common-compression has CRC checks when the closeArchiveEntry method is executed, when the method of the Entry is not DEFLATED and the

[GitHub] [tomcat-jakartaee-migration] aooohan commented on issue #29: Exception in thread "main" java.util.zip.ZipException: Bad CRC checksum for entry META-INF/MANIFEST.MF

aooohan commented on issue #29: URL: https://github.com/apache/tomcat-jakartaee-migration/issues/29#issuecomment-1200766146 > > Hi，@gregorkistler. I've tried to fix the problem, can you test it with this fixed version? branch:

[GitHub] [tomcat-jakartaee-migration] gregorkistler commented on issue #29: Exception in thread "main" java.util.zip.ZipException: Bad CRC checksum for entry META-INF/MANIFEST.MF

gregorkistler commented on issue #29: URL: https://github.com/apache/tomcat-jakartaee-migration/issues/29#issuecomment-1200761127 > Hi，@gregorkistler. I've tried to fix the problem, can you test it with this fixed version? branch: