https://bz.apache.org/bugzilla/show_bug.cgi?id=60781
Bug ID: 60781
Summary: Access Log Valve does not escape the same as
mod_log_config
Product: Tomcat 8
Version: 8.5.11
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: Connectors
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ----
It is my understanding that the log format is supposed to match apache2.
However, escaping is not the same.
As a concrete example, if there is a " in the User-Agent and you use the
combined format, apache2 gives
127.0.0.1 - - [27/Feb/2017:14:31:48 +0000] "GET / HTTP/1.1" 401 17277 "-"
"Agent \"Test\""
While Tomcat gives
127.0.0.1 - - [27/Feb/2017:14:31:48 +0000] "GET / HTTP/1.1" 401 17277 "-"
"Agent "Test""
The latter cannot be parsed safely.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
