https://issues.apache.org/bugzilla/show_bug.cgi?id=45180
Mark Thomas <[EMAIL PROTECTED]> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
--- Comment #2 from Mark Thomas <[EMAIL PROTECTED]> 2008-06-11 09:08:02 PST ---
>From section 2.2 of the HTTP/1.1 spec (rfc2616)
<quote>
HTTP/1.1 header field values can be folded onto multiple lines if the
continuation line begins with a space or horizontal tab. All linear
white space, including folding, has the same semantics as SP. A
recipient MAY replace any linear white space with a single SP before
interpreting the field value or forwarding the message downstream.
</quote>
In an HTTP environment CR and LF characters may be converted to SP. Proxies are
one example where this might happen. You cannot rely on this conversion never
taking place.
You are correct that where Tomcat does this, it does it for security reasons.
This is valid since in HTTP, LWS has the same meaning as SP (see quote above).
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
