Hi all,

On 10/23/2026 10:27 AM, Rémy Maucherat wrote:
On Tue, Oct 20, 2026 at 2:48 PM Enric Pou <[email protected]> wrote:
I have proposed changing the default to -1 in order to preserve
compatibility and would appreciate your feedback.
SInce the usefulness of a long list seems questionable, I'm leaning
towards an info log + truncate. I based my reasoning for the behavior
on the maxParameterCount attribute, but the difference is that a
request cannot be executed with only half the parameters. OTOH,
languages is a user thing and will not functionally break the request.

Rémy

We have also seen this pop up in production.

I like limiting locales without aborting the request as a way forward.

Regarding the limit itself, 10 seems like an okay limit to me for languages
people would actually specify.
As Enric hinted at in [1], browsers tend to add fallback languages to the list, i.e. I specify "German (Germany)" and my browser sends both "de-de" and "de". So worst-case the browser would double the length of the user-specified list.
With that in mind, I'd suggest a default of 20 (or so).

Kind regards,
Konrad

[1] https://github.com/apache/tomcat/pull/1096#issue-5940768790

Thanks,
Enric


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to