You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by re...@apache.org on 2024/10/25 08:53:56 UTC
(tomcat) branch 11.0.x updated: Return 400 for unlock without lock token
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/11.0.x by this push:
new 40d50e1080 Return 400 for unlock without lock token
40d50e1080 is described below
commit 40d50e1080d479836339cdb2a9c6c97fb4d0c999
Author: remm <re...@apache.org>
AuthorDate: Fri Oct 25 10:51:51 2024 +0200
Return 400 for unlock without lock token
---
java/org/apache/catalina/servlets/WebdavServlet.java | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/java/org/apache/catalina/servlets/WebdavServlet.java b/java/org/apache/catalina/servlets/WebdavServlet.java
index ce144c1ed4..7b8de401a0 100644
--- a/java/org/apache/catalina/servlets/WebdavServlet.java
+++ b/java/org/apache/catalina/servlets/WebdavServlet.java
@@ -1719,7 +1719,8 @@ public class WebdavServlet extends DefaultServlet implements PeriodicEventListen
String lockTokenHeader = req.getHeader("Lock-Token");
if (lockTokenHeader == null) {
- lockTokenHeader = "";
+ resp.sendError(HttpServletResponse.SC_BAD_REQUEST);
+ return;
}
boolean unlocked = false;
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org