Here is the patch for Tomcat 3.2.x, turned out to be fairly straightforward,
but again there may be a better place to put this fix and there may be
security issues I hadn't considered...Thanks again!
David Weinrich
--- FileUtil.java Thu Dec 28 19:19:43 2000
+++ FileUtilEd.java Thu Dec
---snip---
> ...but there might be security/implementation
> issues that I missed.
---snip---
Oops! Found one big issue right after I sent off the patch. Patch now checks
for non-hex-character-strings in the encoding, and returns null if present
( similar to what happens if a control character is
