On Tue, Oct 17, 2017 at 5:27 PM, Igal @ Lucee.org <i...@lucee.org> wrote:
> Maor, > > On 10/17/2017 6:32 AM, Mark Thomas wrote: > >> On 16/10/17 21:50, Maor Shiffman wrote: >> >>> Hi, >>> >>> We've recently upgraded our servers from 8.0.43 to 8.0.45 and URLs with >>> consecutive double slashes that used to work such as >>> http://www.domain.com/auth//signin.html stopped working - getting a 404. >>> This happens on our production environment running Linux but also on our >>> development environments running Windows. >>> I searched in the release notes but couldn't find any change that may >>> have >>> caused this. >>> >> I can't reproduce this with a clean Tomcat build from the latest 8.0.x >> source. >> >> Further, I don't recall any changes to normalization in that version >> range (or going back quite a bit earlier) that would impact on that. >> >> Mark >> > > Are you using a web server like nginx in front of Tomcat? > > Igal Sapir > Lucee Core Developer > Lucee.org <http://lucee.org/> > > No, we are using Apache web server in our production environment, but this issue also reproduces in our dev environment which doesn't use a web server. I have further isolated the issue to be in 8.0.45. Could this be related to the fix of https://bz.apache.org/bugzilla/show_bug.cgi?id=61185 ? Thanks, Maor