https://bz.apache.org/bugzilla/show_bug.cgi?id=60781

            Bug ID: 60781
           Summary: Access Log Valve does not escape the same as
                    mod_log_config
           Product: Tomcat 8
           Version: 8.5.11
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: ja...@howeswho.co.uk
  Target Milestone: ----

It is my understanding that the log format is supposed to match apache2.
However, escaping is not the same.

As a concrete example, if there is a " in the User-Agent and you use the
combined format, apache2 gives

    127.0.0.1 - - [27/Feb/2017:14:31:48 +0000] "GET / HTTP/1.1" 401 17277 "-"
"Agent \"Test\""

While Tomcat gives

    127.0.0.1 - - [27/Feb/2017:14:31:48 +0000] "GET / HTTP/1.1" 401 17277 "-"
"Agent "Test""

The latter cannot be parsed safely.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to