https://bz.apache.org/bugzilla/show_bug.cgi?id=60572
Mark Thomas <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |INVALID
--- Comment #1 from Mark Thomas <ma...@apache.org> ---
An unencoded '|' is not a valid character in any part of the request target.
As part of the fix for CVE-2016-6816, parsing of the request target was
tightened. Requests with request targets that contain any characters that are
never valid in the request target are now rejected with a 400 response.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
