You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2020/08/13 09:58:42 UTC

[Bug 64666] New: Cannot allow special characters in query strings without replacing server.xml

https://bz.apache.org/bugzilla/show_bug.cgi?id=64666

            Bug ID: 64666
           Summary: Cannot allow special characters in query strings
                    without replacing server.xml
           Product: Tomcat 8
           Version: 8.5.x-trunk
          Hardware: PC
                OS: Mac OS X 10.1
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: franck102@yahoo.com
  Target Milestone: ----

Square brackets can be allowed in query strings using this configuration in
server.xml:
    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443"
               relaxedQueryChars="[]" />

In a docker image based on the standard tomcat85 base image however, this
forces us to entirely replace the base server.xml.

A system property or some other means of configuring this without modifying
server.xml would be very useful.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 64666] Cannot allow special characters in query strings without replacing server.xml

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64666

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 64666] Cannot allow special characters in query strings without replacing server.xml

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64666

--- Comment #2 from Felix Schumacher <fe...@internetallee.de> ---
Maybe you can achieve the same using a PropertySource and lookup your values
from environment variables. See
https://tomcat.apache.org/tomcat-8.5-doc/config/systemprops.html#Property_replacements
and
https://tomcat.apache.org/tomcat-9.0-doc/api/org/apache/tomcat/util/digester/EnvironmentPropertySource.html
for more information

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 64666] Cannot allow special characters in query strings without replacing server.xml

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64666

--- Comment #1 from Michael Osipov <mi...@apache.org> ---
I am rejecting this because a system property will affect the entire container,
not just this connector. Moreover, RFC 3986 does not allow [ or ] in a query
string w/o pct-encoded because both chars are in gen-delims and not in pchar.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org