Github user kdombeck commented on the issue:
https://github.com/apache/tomcat/pull/96
Thanks for the quick responses.
I modeled this change after the changes for TRACE in the next if statement
below. Also looking at
[issue](https://bz.apache.org/bugzilla/show_bug.cgi?id=60697) this change
seemed to be similar to that one.
It would make more sense to me if a user could actually change the request
some how to invoke PUT or DELETE (by authenticating for example), but in this
case there is nothing the user could do to ever get these 2 methods to work
without changing the readOnly flag to false.
I am not adamant that this change should be made. I am just trying to
understand what appears to be an inconsistency to me.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
