Find attached a patch that fixes a few issues:

1) fix the lock ownership problem of Slide escaping the owner with a CDATA when the owner is a xml fragment instead of a string.

[I still don't like the way thing is handled since it's very inefficient, but the smallest the patch the better]

2) prevent POST requests from being automatically redirected to a resource if it's a collection. This is a potential door to DoS attacks and, besides, collections don't need POST requests anyway.

3) allows logging of the request with their method/uri/thread and their duration in millis (relies on the JVM API so it's not that precise but it's better than nothing)

4) moved the logging of those event to the INFO channel, since the DEBUG channel is way too verbose to be useful in realtime operation.

HTH

--
Stefano.

Attachment: smime.p7s
Description: S/MIME cryptographic signature



Reply via email to