https://bz.apache.org/bugzilla/show_bug.cgi?id=68495
--- Comment #12 from Mark Thomas <ma...@apache.org> --- Thanks for the test case. I am able recreate the issue now. The root cause is a combination of this code in the FormAuthenticator: https://github.com/apache/tomcat/blob/9.0.x/java/org/apache/catalina/authenticator/FormAuthenticator.java#L637 and the changes to MessageBytes back in 9.0.0-M5 and the fix for bug 66627 in 9.0.77. This has been partially fix in 9.0.86 as a side-effect of bug 68026 but it looks as if query string is still affected. I have a more robust fix in mind that I want to test before committing. Assuming all goes well this should be fixed later today and included in the next release round. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org