Hi, r1787662 adds Host header validation along with a fair number of unit tests.
It includes a performance test which indicates - on my machine at least - that the performance impact is in the noise. I'd like to see better performance for full IPv6 addresses but the current code looks to be acceptable. The validation is not yet integrated into the request processing. My primary reason for not integrating it is that it will trigger a 400 response if the header is invalid and I don't want to incorrectly reject valid headers. Therefore I have a request. Please try and break these new parsers. Please commit any values you test with. Once we are happy with the quality of these parsers, I'll integrate them into the request processing. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
