Re: Strict Host Header validation since Tomcat 7.0.87

2018-05-30 Thread Mark Thomas
On 30/05/18 10:00, Sven Buesing wrote: > Hello everyone, > Hello Mark, > > @markt: as this change is from you, I've added you in cc. Please let me know > if you're fine with this. No, I am not. Please do not send direct mail to Tomcat committers. If you have a Tomcat related question, it belongs

Strict Host Header validation since Tomcat 7.0.87

2018-05-30 Thread Sven Buesing
Hello everyone, Hello Mark, @markt: as this change is from you, I've added you in cc. Please let me know if you're fine with this. Since Tomcat 7.0.87 Coyote has added a validation check for Host-Headers. The validation seems to expect that a host header is always a FQDN. But in common DNS setup