Re: URI handling bug in Tomcat 6.0.13?

2007-06-24 Thread Sebastian Kruk
e the behaviour configurable. Sebastian Kruk wrote: Thanks, so if I got it right - due to some security reasons: "Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_j

Re: URI handling bug in Tomcat 6.0.13?

2007-06-24 Thread Sebastian Kruk
he.org/security-6.html Regards, Rainer Sebastian Kruk wrote: Hello, just a quick question. Why URI like the following: http://localhost:8080/jeromedl/mbb/filter/marcont:hasDomain/http%3A %2F%2Fdmoz.org%2FTop result in error 400 - incorrect URI - noSlash error in Tomcat 6.0.13, but were

URI handling bug in Tomcat 6.0.13?

2007-06-24 Thread Sebastian Kruk
Hello, just a quick question. Why URI like the following: http://localhost:8080/jeromedl/mbb/filter/marcont:hasDomain/http%3A%2F %2Fdmoz.org%2FTop result in error 400 - incorrect URI - noSlash error in Tomcat 6.0.13, but were correctly handled in Tomcat 5.5 ? After investigating a little I h