-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Miguel,

On 6/7/12 4:13 AM, Miguel González Castaños wrote:
> On 07/06/2012 00:54, Konstantin Kolinko wrote:
>> It is parameter parsing code. It cannot claim the request as
>> malformed (API does not allow it). It can only skip malformed
>> parameters.
> 
> Does that mean that it won't show up in the access log?

That depends upon how you have configured your access log: you can
configure an access log to log only requests that failed and the
details of that request like this:

<Valve className="org.apache.catalina.valves.AccessLogValve"
     conditionIf="org.apache.catalina.parameter_parse_failed"
     ....
     />

You will probably want to put "%t" and "%r" in your pattern.

Unfortunately, this is a POST that is being processed and it's hard to
use the RequestDumperFilter to dump the requests of only certain
requests.... that might be the only way to get the offending parameter
name or value that is causing this problem.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/Q6dEACgkQ9CaO5/Lv0PA6bQCfcHsaExvYzrgBFl9WM+3Lg+DS
cssAnR1rCga318tOzveCdGDho+5/FCE+
=lPTF
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to