That sounds about right.  Thanks.

On 4/13/2017 11:48 AM, Chris Snider wrote:

Hi Stephen,

Depending on the version of Tomcat you upgraded to, you might be affected by the “Add additional checks for valid characters to the HTTP request line parsing so invalid request lines are rejected sooner. (markt)” that went into 7.0.73.

REF: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html

This will block the requests you reference below since they are not URL encoded. We had lots of JSON passing around in our application that broke with this change. Had to update everything and all our PostMAN tests to use encoded parameters.

Chris Snider

Senior Software Engineer

*Intelligent Software Solutions, A Polaris Alpha Company*

Description: Description: Description: cid:[email protected]

*From:*Andrea Aime [mailto:[email protected]]
*Sent:* Thursday, April 13, 2017 9:35 AM
*To:* Stephen Crawford <[email protected]>
*Cc:* [email protected]
*Subject:* Re: [Geoserver-users] bad request

Hi,

I'd look into what's around GeoServer, by itself GeoServer reports errors with a 200 and the details

in a XML encoded ServiceException, this 400 does not seem like it would be coming from it

(at least not directly)

Cheers

Andrea

On Thu, Apr 13, 2017 at 5:19 PM, Stephen Crawford <[email protected] <mailto:[email protected]>> wrote:

    Hi All,

    I have an app that has been running for 8 or so years using a WFS
    request with a <PropertyIsLike> filter.  Last week the request
    stopped working and returns a 400 BAD REQUEST.  If I change the
    filter to <PropertyIsEqualTo> then it works.  We we running
    geoserver 2.5.5.  The issue prompted us to finally upgrade to 2.11
    but the issue persists. Previous to our upgrade we had made no
    changes to software at all except Tomcat security patches.  It
    seems to me that the request doesn't get all the way to Geoserver
    for there is no return xml.

    Any thoughts?  Query is below.  First query is the original that
    no longer works, the second is the query changed to
    <PropertyIsEqualTo> which does work.

    
http://geo.cei.psu.edu:8080/geoserver/wfs?version=1.0.0&request=GetFeature&typeName=cei:taxon_acres08_48&PropertyName=the_geom,areasymbol,compname,total,gid,areaname,class,sdmlegac,semac,cordate&Filter=<Filter><Or><PropertyIsLike
    wildCard="*" escape="\"
    
singleChar="?"><PropertyName>compname</PropertyName><Literal>lucy</Literal></PropertyIsLike><PropertyIsLike
    wildCard="*" escape="\"
    
singleChar="?"><PropertyName>compname</PropertyName><Literal>LUCY</Literal></PropertyIsLike></Or></Filter>

    
http://geo.cei.psu.edu:8080/geoserver/wfs?version=1.0.0&request=GetFeature&typeName=cei:taxon_acres08_48&PropertyName=the_geom,areasymbol,compname,total,gid,areaname,class,sdmlegac,semac,cordate&Filter=<Filter><Or><PropertyIsEqualTo><PropertyName>compname</PropertyName><Literal>lucy</Literal></PropertyIsEqualTo><PropertyIsEqualTo><PropertyName>compname</PropertyName><Literal>LUCY</Literal></PropertyIsEqualTo></Or></Filter>

    Thanks,
    Steve

--
    Stephen Crawford

    Center for Environmental Informatics

    The Pennsylvania State University

    [email protected] <mailto:[email protected]>

    814.865.9905 <tel:%28814%29%20865-9905>


    
------------------------------------------------------------------------------
    Check out the vibrant tech community on one of the world's most
    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    <http://sdm.link/slashdot>
    _______________________________________________
    Geoserver-users mailing list
    [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/geoserver-users



--

==

GeoServer Professional Services from the experts! Visit

http://goo.gl/it488V for more information.

==

Ing. Andrea Aime

@geowolf

Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054  Massarosa (LU)

phone: +39 0584 962313

fax: +39 0584 1660272

mob: +39  339 8844549

http://www.geo-solutions.it

http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

-------------------------------------------------------



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

--
Stephen Crawford
Center for Environmental Informatics
The Pennsylvania State University
[email protected]
814.865.9905

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to