Re: [Fwd: [SECURITY ISSUE] Using allowLinking with deprecated HTTP 1.1 connector]

2005-02-24 Thread Stefan Bodewig
I have no idea where the original thread happened, at least I didn't see any mails before this one. On Wed, 23 Feb 2005, robert burrell donkin <[EMAIL PROTECTED]> wrote: > i wonder whether henri might be able to bring this up (either > formally or informally) with aim of discovering whether jakar

Re: [Fwd: [SECURITY ISSUE] Using allowLinking with deprecated HTTP 1.1 connector]

2005-02-23 Thread robert burrell donkin
it may well be wiser to discuss these matters on lists which are not public. brian's usually very well informed about such matters. i wonder whether henri might be able to bring this up (either formally or informally) with aim of discovering whether jakarta in general and tomcat in particular

Re: [Fwd: [SECURITY ISSUE] Using allowLinking with deprecated HTTP 1.1 connector]

2005-02-21 Thread Henri Yandell
On Mon, 21 Feb 2005, Mark Thomas wrote: Hi, Having just dealt with the issue below I was thinking where else, other than the Tomcat User mailing list this information needed to be sent? That got me thinking about the wider issue of handling security issues at Jakarta/Apache. I went looking for,

[Fwd: [SECURITY ISSUE] Using allowLinking with deprecated HTTP 1.1 connector]

2005-02-21 Thread Mark Thomas
Hi, Having just dealt with the issue below I was thinking where else, other than the Tomcat User mailing list this information needed to be sent? That got me thinking about the wider issue of handling security issues at Jakarta/Apache. I went looking for, but failed to find, answers to the foll