On 05/02/2017 17:29, Olivier Jaquemet wrote:
[...]
there is one case where the [allowTrace] configuration does not fully
apply response to OPTIONS request for custom servlet (i.e. any non
tomcat servlet inherting from HttpServlet).
In such case the TRACE methods is incorrectly listed in the Allow
header sent back, even though it is correctly handled as not supported
when executed.
[...]
I realized that opening a discussion for this matter may not have been
the best way to process and keep track of the issue.
Therefore I just opened the followng bug report :
https://bz.apache.org/bugzilla/show_bug.cgi?id=60697
I wish I could submit a patch for this, but my knowledge of the Tomcat
architecture is far from what would be required to properly address the
issue. Specifically : how could HttpServlet implementation be modified
to apply the allowTrace settings belonging to connectors implementation,
while keeping code orthogonality...
I'm sure you will have the answer :)
Thanks
Olivier
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
