DO NOT REPLY [Bug 45957] POST request-body permits only ISO-8859-1

2008-10-12 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45957


Mihály Héder <[EMAIL PROTECTED]> changed:

   What|Removed |Added

 CC||[EMAIL PROTECTED]




--- Comment #5 from Mihály Héder <[EMAIL PROTECTED]>  2008-10-12 10:26:09 PST 
---
I absolutely agree with André-John.

This particular issue has been a real showstopper for years and is the most
seriuos argument against Tomcat for non english-only applications. It makes
everything much harder than it should be:

1. you develop something, and you see that the accented characters are broken.
After some googling you find the request.setCharacterEncoding("UTF-8")
solution. You insert it into your code. 

2. you troubleshoot by writing things out to stdout, and checking catalina.out
for results. You see that the encoding is still broken.

3. after painful hours you figure out that the request's encoding had been ok
since step 1, the problem is that _logging_ also has problems with encoding.
You lose some hair.

4. Things are ok with the requests but the UTF-8 responses are broken. Although
not mentioned in the wiki, you quickly find out that you should do 
response.setCharacterEncoding("UTF-8");
That wasn't a big deal.

5. You want to use stuff (frameworks, etc..) developed by else and you don't
want to modigy the code. I'ts time to use the filter solution you have found in
the wiki. You modify your web.xml, insert the class (modified so that is sets
up response character encoding as well) into your jar. You had to do an hour or
so extra work but things are ok.

6. You move your stuff into production environment where there is a Sun Access
Manager or similar in front of your app. Things are broken again. After a lot
of research you figure out that the problem is with the filter chain, and your
only hope is to modify the main conf/web.xml, put your filter there. You
convince the sysadmin that it won't hurt else's webapps, another hours of work.


Agreed, there is a hack to solve every issue listed here but WHY must this be
so painful? I think utf8 should be the default, or configurable at least...
I see people getting stuck with this every now and then and they asking about
configuration options not code.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: DO NOT REPLY [Bug 45957] POST request-body permits only ISO-8859-1

2008-10-12 Thread Margaret Caterisano
I am currently on Foreign Study in the UK and email access may be
sporadic.  I will respond to your email ASAP.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 45957] POST request-body permits only ISO-8859-1

2008-10-12 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45957





--- Comment #6 from Mark Thomas <[EMAIL PROTECTED]>  2008-10-12 11:34:51 PST ---
This was discussed on the users list. See:
http://markmail.org/message/zozxd3iqp47ciisw


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: UTF-8 POST request results in corrupted data

2008-10-12 Thread Andre-John Mas


On 7-Oct-08, at 07:02 , Mark Thomas wrote:


Andre-John Mas wrote:
Thanks for the answer on this point. Reading section 3.7.1 of RFC  
2616
indicates that request can specify a character other than the  
default.

For this reason the following should technically be legal:



What I see, from testing on my Mac, is that Firefox and Safari fail  
to

pass the charset attribute, but Opera does. What I do notice here is
that even though Opera does specify the character set, Tomcat  
ignores it

replacing the submitted Japanese characters by question
marks. This is an indication that UTF-8 was accepted but it was
converted to ISO-8859-1 and no equivalent mapping was available. With
Firefox and Safari I get the same behaviour when I specify:

  request.setCharacterEncoding("UTF-8");

Basically I am not getting the Japanese characters as typed in the  
form.

There is a problem here.


Not that I can see.

The test JSP half way down this page works quite happily for me on any
current Tomcat version, with any input.
http://wiki.apache.org/tomcat/FAQ/CharacterEncoding

If I remove the request.setCharacterEncoding("UTF-8"); line then  
output is

corrupted (as expected).

I then added enctype="application/x-www-form-urlencoded;  
charset=utf-8" to
the form and repeated the test. Again, the output was corrupted with  
IE7

and FF3 as expected since the charset=utf-8 is dropped by the browser.

I then used Fiddler to edit request headers and manually added
charset=utf-8. Everything then worked correctly (as expected).

Are you sure that valves and filters, such as the request dumper  
valve, are

not interfering with your test case?


At this point I am not able to validate this, but from what I can  
remember I was
using a vanilla Tomcat install. I will run further tests when I get a  
chance.


One thing that would be worth seeing is how other application servers  
deal with

this, or if anyone from the w3c has any input on this.

Andre


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 41504] Illegal access: this web application instance has been stopped already

2008-10-12 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=41504





--- Comment #8 from Paul Hamer <[EMAIL PROTECTED]>  2008-10-12 13:58:18 PST ---
Mark, thanks for putting me on the right track!!
Turns out the problem was indeed caused by my own custom classloader. It was
not aware of the webapp getting reloaded and simply kept serving the "old"
classes.

I have now added a LifecycleListener to the StandardContext instance and
whenever a "start" event is received my custom classloader is forced to reload
all classes. Webapp-reloading now works like a charm!! Thanks a lot!

Please note: this does not explain why this issue does not appear to exist in
Tomcat 5.5.12 as suggested by the original submitter of this bug.

Kinds regards,
Paul Hamer


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Bug report for Tomcat 5 [2008/10/12]

2008-10-12 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|27122|Opn|Enh|2004-02-20|IE plugins cannot access components through Tomcat|
|28039|Opn|Enh|2004-03-30|Cluster Support for SingleSignOn  |
|29160|Ver|Enh|2004-05-23|precompile problem: _jspx_meth_* (javax.servlet.js|
|29494|Inf|Enh|2004-06-10|No way to set PATH when running as a service on Wi|
|30241|Ver|Enh|2004-07-21|Enhance build script to use branch argument when c|
|33262|Inf|Enh|2005-01-27|Service Manager autostart should check for adminis|
|33453|Opn|Enh|2005-02-08|Jasper should recompile JSP files whose datestamps|
|33650|Inf|Enh|2005-02-19|Jasper performance for multiple files processing  |
|33671|Opn|Enh|2005-02-21|Manual Windows service installation with custom na|
|34801|New|Enh|2005-05-08|PATCH: CGIServlet does not terminate child after a|
|34805|Ass|Enh|2005-05-08|warn about invalid security constraint url pattern|
|34868|Ass|Enh|2005-05-11|allow to register a trust store for a session that|
|35054|Inf|Enh|2005-05-25|warn if appBase is not existing as a File or direc|
|36133|Inf|Enh|2005-08-10|Support JSS SSL implementation|
|36362|New|Enh|2005-08-25|missing check for Java reserved keywords in tag fi|
|36569|Inf|Enh|2005-09-09|Redirects produce illegal URL's   |
|36837|Inf|Enh|2005-09-28|Looking for ProxyHandler implementation of Http re|
|36922|Inf|Enh|2005-10-04|setup.sh file mis-advertised and missing  |
|36923|New|Nor|2005-10-05|Deactivated EL expressions are not parsed for jsp |
|37018|Ass|Enh|2005-10-11|Document how to use tomcat-SSL with a pkcs11 token|
|37084|Opn|Reg|2005-10-14|JspC from ant fails on JSPs that use custom taglib|
|37334|Inf|Enh|2005-11-02|Realm digest property not aligned with the adminis|
|37449|Opn|Enh|2005-11-10|Two UserDatabaseRealm break manager user  |
|37458|Opn|Nor|2005-11-10|Datarace on org.apache.catalina.loader.WebappClass|
|37485|Inf|Enh|2005-11-14|I'd like to run init SQL after JDBC Connection cre|
|37498|Inf|Nor|2005-11-14|[PATCH] NPE in org.apache.catalina.core.ContainerB|
|37515|Inf|Nor|2005-11-15|smap not generated by JspC when used from Ant for |
|37627|Opn|Nor|2005-11-24|Slow and incomplete dynamic content generation aft|
|37785|Inf|Nor|2005-12-05|Changing startup type via Tomcat Monitor does not |
|37794|Opn|Nor|2005-12-05|getParameter() fails on POST with transfer-encodin|
|37797|Inf|Maj|2005-12-05|Configure Tomcat utility truncates classpath to 96|
|37847|Ass|Enh|2005-12-09|Allow User To Optionally Specify Catalina Output F|
|37869|Opn|Nor|2005-12-12|Cannot obtain client certificate with SSL / client|
|37918|Inf|Nor|2005-12-15|EL cannot find valid getter from object when using|
|37984|New|Nor|2005-12-21|JNDIRealm.java not able to handle MD5 password|
|38046|Ass|Reg|2005-12-27|apache-tomcat-5.5.14-deployer doesn't work (Illega|
|38197|Opn|Maj|2006-01-09|taglib pool bug when tag is used with jsp:attribut|
|38216|Inf|Enh|2006-01-10|Extend Jmxproxy to allow call of MBean Operations |
|38217|Ver|Enh|2006-01-10|mention that private key password and keystore pas|
|38268|Inf|Enh|2006-01-13|User friendly: Need submit button on adding/deleti|
|38352|Inf|Nor|2006-01-22|Additional Entries for Default catalina.policy fil|
|38360|Inf|Enh|2006-01-24|Domain for session cookies|
|38367|Inf|Nor|2006-01-24|Executing any Catalina Ant task results in an exce|
|38427|Inf|Nor|2006-01-27|ServletContextListener Notified Multiple Times Whe|
|38483|New|Nor|2006-02-01|access log valve uses simpledateformat in tread-un|
|38484|New|Min|2006-02-01|webapps Admin: Invalid path /login was requested  |
|38516|Inf|Nor|2006-02-05|Configuration Manager loses "Log On" settings |
|38546|Inf|Enh|2006-02-07|Google bot sends invalid If-Modifed-Since Header, |
|38553|Inf|Nor|2006-02-07|Wrong HTTP code for failed CLIENT-CERT authenticat|
|38570|Inf|Nor|2006-02-08|if docBase path contains "webapps", a backslash is|
|38577|Inf|Enh|2006-02-08|Enhance logging of security failures  |
|38630|

Bug report for Tomcat 3 [2008/10/12]

2008-10-12 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|  412|Ver|Nor|2001-01-08|JspC on Windows fails to handle includes in subdir|
| 2350|Ver|Nor|2001-06-27|ServletConfig.getInitParameter() requires url-patt|
| 6488|Ver|Maj|2002-02-15|Error: 304. Apparent bug in default ErrorHandler c|
| 9737|Ver|Nor|2002-06-10|ArrayIndexOutOfBoundsException when sending just p|
|44911|Ass|Nor|2008-04-30|Test again from Chirag|
+-+---+---+--+--+
| Total5 bugs   |
+---+

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Bug report for Watchdog [2008/10/12]

2008-10-12 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|  278|Unc|Nor|2000-12-04|Bug in GetParameterValuesTestServlet.java file Bug|
|  279|Unc|Nor|2000-12-04|Logical Error in GetParameterValuesTestServlet Bug|
|  469|Unc|Nor|2001-01-17|in example-taglib.tld "urn" should be "uri" BugRat|
|  470|Unc|Nor|2001-01-17|FAIL positiveForward.jsp and positiveInclude.jsp B|
| 9634|New|Enh|2002-06-05|No tests exist for ServletContext.getResourcePaths|
|10703|New|Enh|2002-07-11|Need to test getRequestURI after RequestDispatcher|
|11336|New|Enh|2002-07-31|Test wrapped path methods with RD.foward()|
|11663|New|Maj|2002-08-13|JSP precompile tests rely on Jasper specific behav|
|11664|New|Maj|2002-08-13|A sweep is needed of all Watchdog 4.0 tag librarie|
|11665|New|Maj|2002-08-13|ServletToJSPErrorPageTest and ServletToServletErro|
|11666|New|Maj|2002-08-13|SetBufferSize_1TestServlet is invalid.|
|14004|New|Maj|2002-10-28|Incorrent behaviour of all attribute-related lifec|
|15504|New|Nor|2002-12-18|JSP positiveGetValues test relies on order preserv|
|24649|New|Nor|2003-11-12|getRemoteHost fails when agent has uppercase chara|
|29398|New|Nor|2004-06-04|Update site and note current status   |
+-+---+---+--+--+
| Total   15 bugs   |
+---+

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Bug report for Tomcat 4 [2008/10/12]

2008-10-12 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
| 3839|Opn|Enh|2001-09-26|Problem bookmarking login page|
| 4227|Opn|Enh|2001-10-17|Invalid CGI path  |
| 5329|New|Enh|2001-12-08|NT Service exits startup before Tomcat is finished|
| 5795|New|Enh|2002-01-10|Catalina Shutdown relies on localhost causing prob|
| 5829|New|Enh|2002-01-13|StandardManager needs to cope with sessions throwi|
| 5985|New|Enh|2002-01-23|Tomcat should perform a more restrictive validatio|
| 6600|Opn|Enh|2002-02-20|enodeURL adds 'jsession' when 'isRequestedSessionI|
| 6614|New|Enh|2002-02-21|Have Bootstrap and StandardClassLoader use the sam|
| 6671|New|Enh|2002-02-25|Simple custom tag example uses old declaration sty|
| 7043|New|Enh|2002-03-12|database user and password for JDBC Based Store   |
| 7374|New|Enh|2002-03-22|Apache Tomcat/4.0.1 message on standard output|
| 7676|New|Enh|2002-04-02|Allow name property to use match experssions in  without className in server.xml produces N|
|11129|New|Enh|2002-07-24|New valve for putting the sessionIDs in the reques|
|11248|New|Enh|2002-07-29|DefaultServlet doesn't send expires header|
|11754|Opn|Enh|2002-08-15|Synchronous shutdown script - shutdown.sh should w|
|12069|New|Enh|2002-08-27|Creation of more HttpSession objects for one previ|
|12428|Opn|Enh|2002-09-09|request.getUserPrincipal(): Misinterpretation of s|
|12658|New|Enh|2002-09-15|a proxy host and port at the  element level |
|12766|New|Enh|2002-09-18|Tomcat should use tld files in /WEB-INF/ over vers|
|13309|Opn|Enh|2002-10-04|Catalina calls System.exit()  |
|13634|New|Enh|2002-10-15|Allowing system properties to be substituted in co|
|13689|Opn|Enh|2002-10-16|Classloader paths for 'Common' classes and librari|
|13731|New|Enh|2002-10-17|Final request, response, session and other variabl|
|13941|New|Enh|2002-10-24|reload is VERY slow   |
|13965|New|Enh|2002-10-25|Catalina.sh correction request for Tru64 Unix |
|14097|New|Enh|2002-10-30|hardcoded registry value for vm lets tomcat servic|
|14416|New|Enh|2002-11-10|blank tag name in TLD cause NullPointerException  |
|14635|New|Enh|2002-11-18|Should be possible not to have -MM-DD in log f|
|14766|New|Enh|2002-11-22|Redirect Vavle|
|14993|New|Enh|2002-12-02|Possible obselete synchronized declaration|
|15115|New|Enh|2002-12-05|correct docs... XML parser *cannot* be overridden |
|15417|Opn|Enh|2002-12-16|Add port for forced compilation of JSP pages  |
|15688|New|Enh|2002-12-27|full-qualified names instead of imports   |
|15941|New|Enh|2003-01-10|Expose rootCause exceptions at deeper levels  |
|16294|New|Enh|2003-01-21|Configurable URL Decoding.|
|16357|New|Enh|2003-01-23|"connection timeout reached"  |
|16531|New|Enh|2003-01-29|Updating already deployed ".war" files in a single|
|16579|New|Enh|2003-01-30|documentation page layout/style breaks wrapping to|
|16596|New|Enh|2003-01-30|option for disabling log rotation |
|17070|New|Enh|2003-02-14|The Catalina Ant tasks do not allow for 'reusable'|
|17146|New|Enh|2003-02-18|Simplify build.xml using 

Re: Bug report for Tomcat 5 [2008/10/12]

2008-10-12 Thread Margaret Caterisano
I am currently on Foreign Study in the UK and email access may be
sporadic.  I will respond to your email ASAP.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 44679] Cookies are treated differently between 6.0.16 and 6.0.14

2008-10-12 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=44679





--- Comment #23 from Tristan Tarrant <[EMAIL PROTECTED]>  2008-10-12 23:57:00 
PST ---
(In reply to comment #22)
> simple wrappers to strip = and \n (tweak to accurately use your own
> BASE64Encoder class)

WHAT ? I'm sorry but that is not an acceptable solution. What if the cookie is
read by applications other than mine ? I have to tell them to strip and repad
the token ? 

Shouldn't a version 1 cookie be quoted, therefore protecting the "=" and
therefore resulting in a valid cookie ?

Otherwise the exception thrown by the following:

java.lang.IllegalArgumentException: Control character in cookie value, consider
BASE64 encoding your value
at
org.apache.tomcat.util.http.ServerCookie.maybeQuote2(ServerCookie.java:365)
at
org.apache.tomcat.util.http.ServerCookie.maybeQuote2(ServerCookie.java:358)
at
org.apache.tomcat.util.http.ServerCookie.appendCookieValue(ServerCookie.java:268)


is incorrect and confusing and should be changed. Should I file a different bug
for this ?


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]