https://issues.apache.org/bugzilla/show_bug.cgi?id=54382

--- Comment #2 from Konstantin Kolinko <[email protected]> ---
Proposed for 6.0.

For the record:
1. The stacktraces in 6.0 are, for SSIServlet and SSIFilter:

java.lang.NullPointerException
    org.apache.catalina.ssi.SSIProcessor.process(SSIProcessor.java:132)
    org.apache.catalina.ssi.SSIServlet.processSSI(SSIServlet.java:208)
    org.apache.catalina.ssi.SSIServlet.requestHandler(SSIServlet.java:174)
    org.apache.catalina.ssi.SSIServlet.doGet(SSIServlet.java:110)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:723)

java.lang.NullPointerException
    org.apache.catalina.ssi.SSIProcessor.process(SSIProcessor.java:132)
    org.apache.catalina.ssi.SSIFilter.doFilter(SSIFilter.java:142)

2. With the patch applied, processing the "<!--#-->" comment replaces it with
the following text: 

  "[an error occurred while processing this directive]"

and the following is logged into localhost.*.log file:

  org.apache.catalina.core.ApplicationContext log
  INFO: Unknown command: 

This is OK, because there is very little difference between an empty command
name and a wrong command name. If one treats it as a comment and writes any
random text after the '#', it would trigger the same error message.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to