Re: Default Servlet and POST

2025-03-17 Thread Christopher Schultz
Mark, On 3/17/25 8:49 AM, Mark Thomas wrote: On 12/03/2025 13:18, Rémy Maucherat wrote: On Wed, Mar 12, 2025 at 1:23 PM Mark Thomas wrote: All, I have been working through the some specification compliance questions raised by some research into HTTP conformance [1]. That paper's focus is s

Re: Default Servlet and POST

2025-03-17 Thread Mark Thomas
On 12/03/2025 13:18, Rémy Maucherat wrote: On Wed, Mar 12, 2025 at 1:23 PM Mark Thomas wrote: All, I have been working through the some specification compliance questions raised by some research into HTTP conformance [1]. That paper's focus is security but I don't see any security concerns f

Re: Default Servlet and POST

2025-03-12 Thread Rémy Maucherat
On Wed, Mar 12, 2025 at 1:23 PM Mark Thomas wrote: > > All, > > I have been working through the some specification compliance questions > raised by some research into HTTP conformance [1]. > > That paper's focus is security but I don't see any security concerns for > Tomcat. I do see a number of f

Default Servlet and POST

2025-03-12 Thread Mark Thomas
All, I have been working through the some specification compliance questions raised by some research into HTTP conformance [1]. That paper's focus is security but I don't see any security concerns for Tomcat. I do see a number of false positive results and I have raised issues for those. O