https://bz.apache.org/bugzilla/show_bug.cgi?id=60594
--- Comment #26 from Lulseged Zerfu <zlulse...@hotmail.com> --- Hi We don't see anyway out when millions of terminals are not working and that tomcat restricted '"' from being a part of request URL. Terminals will not comply overnight but are starting to comply slowly. Therefore we need to allow '"' under some transitional period before totally disallow the '"' char in a request URL. Staying on tomcat version 8.0.36 still risky because CVE-2016-6816 can be triggered. BR Lulseged Zerfu -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
