DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21939>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21939

Coyote JK 2 outputs request parameters

           Summary: Coyote JK 2 outputs request parameters
           Product: Tomcat 4
           Version: 4.1.24
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Other
         Component: Connector:Coyote JK 2
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


The Coyote JK 2 connector is dumping all request parameters to the console when 
a request goes through it. It dumps them in a hex mode, but they are still 
there. It is important to be able to turn this off, especially when the user of 
a web application enters a password on a form field.

I did some initial debugging and found the problem in org.apache.jk.common.
MsgAjp in the dump(String) method. On line 345 a call to System.out.println is 
being made to output the reqest parameters. A possible correction would be to 
make this a call to log.debug() or log.trace() so that it would use the logging 
configuration instead of outputting this all the time.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to