https://bz.apache.org/bugzilla/show_bug.cgi?id=60572
mgrigorov <mgrigo...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|REOPENED |RESOLVED
--- Comment #3 from mgrigorov <mgrigo...@apache.org> ---
A change in 8.5.8 disallowed such characters in the url when not encoded.
They were allowed by mistake in previous versions.
Please consult with the CVE and the changelog of 8.5.8.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
