https://bz.apache.org/bugzilla/show_bug.cgi?id=62371

--- Comment #7 from Mark Thomas <ma...@apache.org> ---
(In reply to Mark Thomas from comment #6)
> (In reply to Robert Rettig from comment #4)
> > Created attachment 35931 [details]
> > Fixes hyphen validation
> 
> This patch is not consistent with the RFCs for host / domain names. I'm
> currently -1 on applying it for that reason.

While Tomcat doesn't have a formal policy, the general expectation is that
clients confirm to the relevant RFCs. Therefore, Tomcat does, from time to
time, tighten up the validation of input data (In reply to Robert Rettig from
comment #5)
> This effects version 8.5.31 too, which has much bigger impact to other
> projects!
> 
> see:
> http://svn.apache.org/viewvc/tomcat/tc8.5.x/tags/TOMCAT_8_5_31/java/org/
> apache/tomcat/util/http/parser/HttpParser.java?r1=1830182&r2=1830188
> 
> This validation is a new feature introduced in a minor version change!
> 
> Please check if such changes really correspond to your project policies.

While Tomcat doesn't have a formal policy, the general expectation is that
clients confirm to the relevant RFCs. Therefore, Tomcat does, from time to
time, tighten up the validation of input data when gaps in validation are
identified.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to