Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-17 Thread Mark Thomas
On 17/09/2024 13:46, manjosh ramesh wrote: Hi Mark, What is strange is that we are obtaining the cookie by triggering an HTTP request to a spring-boot application running on Tomcat. The same tomcat server adds '^M$' at the end of each line in the response. If we redirect this response to a file

Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-17 Thread manjosh ramesh
Hi Mark, What is strange is that we are obtaining the cookie by triggering an HTTP request to a spring-boot application running on Tomcat. The same tomcat server adds '^M$' at the end of each line in the response.  If we redirect this response to a file and use a cookie, Tomcat rejects it. Regard

Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-17 Thread Mark Thomas
On 17/09/2024 04:44, manjosh ramesh wrote: Hi,ok, so this was a bug in older tomcat release and has been fixed in newer version, is it? Yes. Could you please share the bug id for this change? No. Not every fix is associated with a bug ID since not every issue is raised via the issue tr

Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-16 Thread manjosh ramesh
Hi,ok, so this was a bug in older tomcat release and has been fixed in newer version, is it? Could you please share the bug id for this change? Because the older tomcat allows this type of request. Also Our cookie is complient. We are not able to find what is not complient in our cookie. It on