https://bz.apache.org/bugzilla/show_bug.cgi?id=58031
--- Comment #6 from Konstantin Kolinko <knst.koli...@gmail.com> --- (In reply to Christopher L. Simons from comment #4) > > Unconditionally sending a 400 from FailedRequestFilter upon failure seems > incorrect as the HTTP spec states that 400 is to be used when the request > failed "due to malformed syntax,"[1] > > [1] HTTP/1.1: Status Code Definitions > http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.1 In my opinion, it would be nice to use 413, but it is not wrong to use 400. "400" is just the generic error code in 4xx series. It says "it is client's fault". Nothing more. Likewise "500" is the generic error code in 5xx series. Note that RFC2616 is obsolete. Current specification for HTTP/1.1 status codes is RFC 7231: http://tools.ietf.org/html/rfc7231#section-6.5.1 HTTP RFCs are listed at https://wiki.apache.org/tomcat/Specifications#HTTP -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
