You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2009/01/23 04:01:03 UTC

DO NOT REPLY [Bug 46591] New: Revision 678137 is unnecessary

https://issues.apache.org/bugzilla/show_bug.cgi?id=46591

           Summary: Revision 678137 is unnecessary
           Product: Tomcat 6
           Version: 6.0.18
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Jasper
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: varun.srivastav@gmail.com


Hi,
 In file CoyoteAdapter.java we unnecessarily having new function checkNormalize
as resolution number 678137. We could have easily achieved the goal by calling
convertURI before normalize().


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 46591] Revision 678137 is unnecessary

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46591


Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




--- Comment #1 from Mark Thomas <ma...@apache.org>  2009-01-25 01:50:44 PST ---
Character decoding should not result in a URI that is not normalized. If it
does, it is indicative of a bug in the character decoding that has possible
security implications. Therefore, the code has been written to detect this
situation an report it.

The approach proposed above would hide any character decoding bugs.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org