[Bug 66196] HTTP/1 connector doesn't blow-up when HTTP header contains non-ASCII characters

https://bz.apache.org/bugzilla/show_bug.cgi?id=66196 --- Comment #6 from ttera --- When will it be backported to v8.5, 9 and 10.0? -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-ma

[Bug 66304] CORS returns double Allow-Origin header

https://bz.apache.org/bugzilla/show_bug.cgi?id=66304 --- Comment #4 from glenn_...@hotmail.com --- (In reply to Christopher Schultz from comment #3) > Wow, that's a pretty bad security problem in PlantUML IMHO. I agree. I already made a bug report in the PlantUML Server GitHub repo. -- You are

[Bug 66294] Util.getContextClassLoader() can be a hotspot

https://bz.apache.org/bugzilla/show_bug.cgi?id=66294 --- Comment #2 from Maximilian Hensel --- (In reply to Mark Thomas from comment #1) > Given that the SecurityManager is heading towards deprecation, why not just > run without a SecurityManager to avoid this hotspot? We've checked this, but un

[GitHub] [tomcat] ChristopherSchultz commented on pull request #555: Update OpenSSLEngine.java changed 'toArray(new String[size])' to 'toArray(new String[0])'

ChristopherSchultz commented on PR #555: URL: https://github.com/apache/tomcat/pull/555#issuecomment-1277719549 > > It usually does make sense. See https://www.baeldung.com/java-collection-toarray-methods > > Wow, interesting, it turns out that there is a difference in performance be

[GitHub] [tomcat] ChristopherSchultz commented on pull request #555: Update OpenSSLEngine.java changed 'toArray(new String[size])' to 'toArray(new String[0])'

ChristopherSchultz commented on PR #555: URL: https://github.com/apache/tomcat/pull/555#issuecomment-1277717245 If we _really_ want to improve performance, we should be using static zero-sized arrays instead of instantiating them each time. A zero-item array is immutable, and thus infinitel

[Bug 66304] CORS returns double Allow-Origin header

https://bz.apache.org/bugzilla/show_bug.cgi?id=66304 --- Comment #3 from Christopher Schultz --- Wow, that's a pretty bad security problem in PlantUML IMHO. -- You are receiving this mail because: You are the assignee for the bug.