This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/master by this push: new 5a17fb7 Update changelog 5a17fb7 is described below commit 5a17fb70cdad1c329ea203309f69803c930670f1 Author: Mark Thomas <ma...@apache.org> AuthorDate: Sat Nov 30 11:58:43 2019 +0000 Update changelog --- webapps/docs/changelog.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml index 3d46430..99094ae 100644 --- a/webapps/docs/changelog.xml +++ b/webapps/docs/changelog.xml @@ -57,6 +57,12 @@ changes introduced in 9.0.28. Connections to URLs obtained for JAR resources could not be cast to <code>JarURLConnection</code>. (markt) </fix> + <fix> + <bug>63939</bug>: Correct the same origin check in the CORS filter. An + origin with an explicit default port is now considered to be the same as + an origin without a deafult port and origins are now compared in a + case-sensitive manner as required by the CORS specification. (markt) + </fix> </changelog> </subsection> <subsection name="Coyote"> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org