You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Maor Shiffman <ma...@feex.com> on 2017/10/16 20:50:06 UTC
Consecutive double slashes in URLs
Hi,
We've recently upgraded our servers from 8.0.43 to 8.0.45 and URLs with
consecutive double slashes that used to work such as
http://www.domain.com/auth//signin.html stopped working - getting a 404.
This happens on our production environment running Linux but also on our
development environments running Windows.
I searched in the release notes but couldn't find any change that may have
caused this.
Thanks,
Maor
Re: Consecutive double slashes in URLs
Posted by Mark Thomas <ma...@apache.org>.
On 18/10/17 22:23, Maor Shiffman wrote:
> On Wed, Oct 18, 2017 at 11:58 PM, Mark Thomas <ma...@apache.org> wrote:
>
>> On 18/10/17 21:49, Maor Shiffman wrote:
>>
>>> Hi,
>>>
>>> Attached are two war files that demonstrate the issue - ROOT.war and
>>> context2.war.
>>> There are two contexts - ROOT, that uses a url rewrite filter (tuckey)
>>> to forward all requests to the second context - context2 (which also
>>> uses a rewrite filter).
>>> Using 8.0.44 and the url http://localhost:8080/index//index.html
>>> everything works ok (note the double slash).
>>> Using 8.0.45 with the same url returns 404.
>>> Also getting a 404 with 8.0.47.
>>
>> The mailing list strips attachments.
>>
>> Please create a Bugzilla entry and add them there. Please ensure that
>> you include the source.
>>
>> Mark
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
> Submitted: https://bz.apache.org/bugzilla/show_bug.cgi?id=61634
Thanks.
TL;DR - not a Tomcat bug. See the issue for the full explanation.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Consecutive double slashes in URLs
Posted by Maor Shiffman <ma...@feex.com>.
On Wed, Oct 18, 2017 at 11:58 PM, Mark Thomas <ma...@apache.org> wrote:
> On 18/10/17 21:49, Maor Shiffman wrote:
>
> > Hi,
> >
> > Attached are two war files that demonstrate the issue - ROOT.war and
> > context2.war.
> > There are two contexts - ROOT, that uses a url rewrite filter (tuckey)
> > to forward all requests to the second context - context2 (which also
> > uses a rewrite filter).
> > Using 8.0.44 and the url http://localhost:8080/index//index.html
> > everything works ok (note the double slash).
> > Using 8.0.45 with the same url returns 404.
> > Also getting a 404 with 8.0.47.
>
> The mailing list strips attachments.
>
> Please create a Bugzilla entry and add them there. Please ensure that
> you include the source.
>
> Mark
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Submitted: https://bz.apache.org/bugzilla/show_bug.cgi?id=61634
Thanks,
Maor
Re: Consecutive double slashes in URLs
Posted by Mark Thomas <ma...@apache.org>.
On 18/10/17 21:49, Maor Shiffman wrote:
> Hi,
>
> Attached are two war files that demonstrate the issue - ROOT.war and
> context2.war.
> There are two contexts - ROOT, that uses a url rewrite filter (tuckey)
> to forward all requests to the second context - context2 (which also
> uses a rewrite filter).
> Using 8.0.44 and the url http://localhost:8080/index//index.html
> everything works ok (note the double slash).
> Using 8.0.45 with the same url returns 404.
> Also getting a 404 with 8.0.47.
The mailing list strips attachments.
Please create a Bugzilla entry and add them there. Please ensure that
you include the source.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Consecutive double slashes in URLs
Posted by Maor Shiffman <ma...@feex.com>.
On Tue, Oct 17, 2017 at 10:11 PM, Mark Thomas <ma...@apache.org> wrote:
> On 17/10/17 15:32, Maor Shiffman wrote:
>
> > No, we are using Apache web server in our production environment, but
> this
> > issue also reproduces in our dev environment which doesn't use a web
> server.
> > I have further isolated the issue to be in 8.0.45.
> > Could this be related to the fix of
> > https://bz.apache.org/bugzilla/show_bug.cgi?id=61185 ?
>
> Unlikely.
>
> As I said, I can't reproduce this on a clean install.
>
> If you could provide a test case that demonstrates this issue with a
> clean install of the latest Tomcat 8.0.x release, that would enable
> folks here to investigate further.
>
> Mark
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Hi,
Attached are two war files that demonstrate the issue - ROOT.war and
context2.war.
There are two contexts - ROOT, that uses a url rewrite filter (tuckey) to
forward all requests to the second context - context2 (which also uses a
rewrite filter).
Using 8.0.44 and the url http://localhost:8080/index//index.html everything
works ok (note the double slash).
Using 8.0.45 with the same url returns 404.
Also getting a 404 with 8.0.47.
Thanks,
Maor
Re: Consecutive double slashes in URLs
Posted by Mark Thomas <ma...@apache.org>.
On 17/10/17 15:32, Maor Shiffman wrote:
> No, we are using Apache web server in our production environment, but this
> issue also reproduces in our dev environment which doesn't use a web server.
> I have further isolated the issue to be in 8.0.45.
> Could this be related to the fix of
> https://bz.apache.org/bugzilla/show_bug.cgi?id=61185 ?
Unlikely.
As I said, I can't reproduce this on a clean install.
If you could provide a test case that demonstrates this issue with a
clean install of the latest Tomcat 8.0.x release, that would enable
folks here to investigate further.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Consecutive double slashes in URLs
Posted by Maor Shiffman <ma...@feex.com>.
On Tue, Oct 17, 2017 at 5:27 PM, Igal @ Lucee.org <ig...@lucee.org> wrote:
> Maor,
>
> On 10/17/2017 6:32 AM, Mark Thomas wrote:
>
>> On 16/10/17 21:50, Maor Shiffman wrote:
>>
>>> Hi,
>>>
>>> We've recently upgraded our servers from 8.0.43 to 8.0.45 and URLs with
>>> consecutive double slashes that used to work such as
>>> http://www.domain.com/auth//signin.html stopped working - getting a 404.
>>> This happens on our production environment running Linux but also on our
>>> development environments running Windows.
>>> I searched in the release notes but couldn't find any change that may
>>> have
>>> caused this.
>>>
>> I can't reproduce this with a clean Tomcat build from the latest 8.0.x
>> source.
>>
>> Further, I don't recall any changes to normalization in that version
>> range (or going back quite a bit earlier) that would impact on that.
>>
>> Mark
>>
>
> Are you using a web server like nginx in front of Tomcat?
>
> Igal Sapir
> Lucee Core Developer
> Lucee.org <http://lucee.org/>
>
>
No, we are using Apache web server in our production environment, but this
issue also reproduces in our dev environment which doesn't use a web server.
I have further isolated the issue to be in 8.0.45.
Could this be related to the fix of
https://bz.apache.org/bugzilla/show_bug.cgi?id=61185 ?
Thanks,
Maor
Re: Consecutive double slashes in URLs
Posted by "Igal @ Lucee.org" <ig...@lucee.org>.
Maor,
On 10/17/2017 6:32 AM, Mark Thomas wrote:
> On 16/10/17 21:50, Maor Shiffman wrote:
>> Hi,
>>
>> We've recently upgraded our servers from 8.0.43 to 8.0.45 and URLs with
>> consecutive double slashes that used to work such as
>> http://www.domain.com/auth//signin.html stopped working - getting a 404.
>> This happens on our production environment running Linux but also on our
>> development environments running Windows.
>> I searched in the release notes but couldn't find any change that may have
>> caused this.
> I can't reproduce this with a clean Tomcat build from the latest 8.0.x
> source.
>
> Further, I don't recall any changes to normalization in that version
> range (or going back quite a bit earlier) that would impact on that.
>
> Mark
Are you using a web server like nginx in front of Tomcat?
Igal Sapir
Lucee Core Developer
Lucee.org <http://lucee.org/>
Re: Consecutive double slashes in URLs
Posted by Mark Thomas <ma...@apache.org>.
On 16/10/17 21:50, Maor Shiffman wrote:
> Hi,
>
> We've recently upgraded our servers from 8.0.43 to 8.0.45 and URLs with
> consecutive double slashes that used to work such as
> http://www.domain.com/auth//signin.html stopped working - getting a 404.
> This happens on our production environment running Linux but also on our
> development environments running Windows.
> I searched in the release notes but couldn't find any change that may have
> caused this.
I can't reproduce this with a clean Tomcat build from the latest 8.0.x
source.
Further, I don't recall any changes to normalization in that version
range (or going back quite a bit earlier) that would impact on that.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org