https://bz.apache.org/bugzilla/show_bug.cgi?id=63939
--- Comment #2 from Mark Thomas <ma...@apache.org> --- As far as the case sensitivity of the check (or not) goes, both the scheme and host are case insensitive although lower case is the convention for both. It really should not make any difference at all whether this check is case sensitive or not. That said, this is the CORS filter and the CORS spec says the check should be performed in a case sensitive manner so I do think we should change this. We can change the method name at the same time. I suspect this will be part of some slightly wider refactoring in support of fixing bug 63637. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org