panchenko opened a new pull request #233: if TRACE is not allowed skip erorr page for such requests URL: https://github.com/apache/tomcat/pull/233 I have a Spring Boot application, and Spring Boot by default configures an erorr page. The TTACE method is not alloed (default configuration). When a TRACE request happens it tries to return 405, which is then sent to the error page which is not expecting to handle it and finally request is served by `HttpServlet.doTrace()`, response status is 405, but headers are returned back. I thinkit should be fixed in Tomcat - if TRACE is not allowed, then application should never receive such requests. Please see the suggested change and tests.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
