Author: kkolinko
Date: Fri Jun 6 16:09:16 2014
New Revision: 1600948
URL: http://svn.apache.org/r1600948
Log:
https://issues.apache.org/bugzilla/show_bug.cgi?id=56568
Fix missing "return" statement for JSP method name check.
Modified:
tomcat/trunk/java/org/apache/jasper/servlet/JspServlet.java
Modified: tomcat/trunk/java/org/apache/jasper/servlet/JspServlet.java
URL:
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/jasper/servlet/JspServlet.java?rev=1600948&r1=1600947&r2=1600948&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/jasper/servlet/JspServlet.java (original)
+++ tomcat/trunk/java/org/apache/jasper/servlet/JspServlet.java Fri Jun 6
16:09:16 2014
@@ -292,6 +292,7 @@ public class JspServlet extends HttpServ
// against verb tampering
response.sendError(HttpServletResponse.SC_METHOD_NOT_ALLOWED,
Localizer.getMessage("jsp.error.servlet.invalid.method"));
+ return;
}
//jspFile may be configured as an init-param for this servlet instance
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
