https://issues.apache.org/bugzilla/show_bug.cgi?id=57178
--- Comment #3 from Mark Thomas <ma...@apache.org> --- Having had a closer look at this, I'm wondering why another configation option is needed. Why not just add "null" to the list of allowed origins? (This would still requires a small patch so null is accepted as a valid origin.) -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org