Remy Maucherat wrote:
Jason Hunter wrote:
I do have a CLA on file. Aren't members required to? :)
That code donation happened while Tomcat was still Sun internal and I
was helping Sun as a contractor. Those were the good old days before
I was burdened with the knowledge about IP rights
e the right to do. Does Jason have a
CLA, and if not, would we need one?
I think we should remove the Sun permission line; it's not important
to the existence in Tomcat. Keeping the rest of the comment seems fine
to me, provided we're sure we own the code.
Hen
On Wed, 22 Dec 2004 14:1
class is based on a class originally written
> by Jason
> > Hunter
> >19: * <[EMAIL PROTECTED]> as part of the book "Java Servlet
> > Programming"
> >20: * (O'Reilly). See http://www.servlets.com/book for more
> > informat
Shouldn't that be & instead?
-jh-
[EMAIL PROTECTED] wrote:
>
> jfarcand2002/12/13 08:47:29
>
> Modified:jsr154/src/share/javax/servlet/http HttpUtils.java
> Log:
> Doclets bombs when processing this file (minor fix)
>
> Submitted by: Ryan Lubke
>
> Revision ChangesPath
> It seems Jon is more interested in a release without jsp then in a
> release that includes velocity. Too bad.
I think that's to Jon's credit. It shows the goal isn't to put Velocity
and JSP on even footing, but just to provide what users want, which is
often a more secure server without JSP.
You only use http:// in the GET request if you're talking to a proxy
server. That's probably why you got the bad request error, not because
of the %2f. You should try:
GET /cgi-bin/dumpenv.bat/fu%2fbar HTTP/1.1
-jh-
Marc Saegesser wrote:
>
> Oops, minor correction. Apache actually returns 4
Marc,
Thanks for still thinking about this. :-) And thanks to Lars for
raising the interesting point from 2396 that a "/" has a reserved
purpose in a URI and if you want to use it for a different purpose you
should escape it. That makes it sound like your patch is a highly
reasonable solution,
sers is the fact that this Jasper does not let you use
> pageContext.removeAttribute() to remove an attribute from request scope.
>
> Craig
>
> On Mon, 10 Sep 2001, Jason Hunter wrote:
>
> > Date: Mon, 10 Sep 2001 22:11:25 -0700
> > From: Jason Hunter <[EMAIL
I just posted on Servlets.com a new resource listing the top bugs a
servlet/JSP programmer should know about. They're culled from my email
inbox, based on the most
frequently reported problems sent to me by users. Several directly
involve Apache/Tomcat, so I thought this would be a good forum in
lization then the data *must* be in the query string.
>
> Marc Saegesser
>
> > -Original Message-
> > From: Jason Hunter [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, August 27, 2001 8:45 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Tomcat 3.2.3 and getPath
Marc Saegesser wrote:
>
> Using Apache 1.3.19 here's what I see. Apache does normalize the URL but
> there is a small difference between what it does and what Tomcat does.
> Apache does not remove multiple adjacent / characters. For example,
>
> http://server/cgi-bin/script/fu/bar --> PATH_INF
> > > This is even worse because we also won't allow the URL to be
> > encoded like
> > >
> > > http://localhost:8080/servlet/SnoopServlet/http:%2F%2Ffubar
> > >
> > > because we make some rather draconian precautions to ensure that nastily
> > > encoded URLs can't obtain access to protected resou
Marc Saegesser wrote:
>
> I just tried this using the SnoopServlet that ships with Tomcat using a URL
> like
>
> http://localhost:8080/servlet/SnoopServlet/http://fubar
>
> and got
>
> /http:/fubar
>
> as the path info. Your description makes it look like your losing http: in
> addition to t
It seems that Tomcat 3.2.3 has a bug (a regression) that hits my book's
Example 5-5. See:
http://www.servlets.com/jservlet2/examples/ch05/index.html#ex05_05
The bug is that for the following URL:
http://www.servlets.com/jservlet2/examples/ch05/goto/http://www.servlets.com
the goto servlet sho
On my site I use Tomcat 3.2.1 with Apache 1.3.14 and mod_jk ajp12.
Someone reported the following problem.
>> I clicked on "Servlet ISPs" on Servlets.com and was redirected to
>>http://www.servlets.com/isps/servlet/ISPViewAll which threw the
>>following exception. Hope it helps...
>>
>> Error
r help and a happy new year.
Cheers Bernhard
===
Bernhard Herlemann
Software Developer
Tel.: +49 781 96 92 96 2
Email: [EMAIL PROTECTED]
www.skyon.com
ASOC has become Skyon AG
Central Call0700-SKYON-888
-Ursprüngliche Nachricht---
16 matches
Mail list logo