https://issues.apache.org/bugzilla/show_bug.cgi?id=54602
--- Comment #2 from Mark Thomas <ma...@apache.org> --- Part of the problem here is that the UTF-8 decoder should reject bytes 5-8 as an invalid sequence but doesn't. That is a JVM bug that needs to be reported to Oracle. Given the widespread use of UTF-8 I suspect we'll need to look at using the stricter UTF-8 decoder we use in WebSocket more widely. A second issue (that doesn't affect this report) is that the leftover byte array is not big enough for the decoders available in the JRE. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org