Re: Using Async Servlets correctly to avoid smuggling.

2023-11-25 Thread Mark Thomas
On 25/11/2023 01:43, Adwait Kumar Singh wrote: Hey Tomcat users, I am using Async Servlets and have a question on how to safeguard my application from Request Smuggling. In my current setup I do the following, 1. `startAsync` on the ServletRequest. 2. Create a ReadListener and attach it to the

Re: Possible way to avoid Tomcat from recycling the request/response on error?

2023-11-25 Thread Mark Thomas
On 25/11/2023 05:30, Adwait Kumar Singh wrote: Is there a way around this, to keep the async context open even on an error and not close it till complete is invoked? No. The spec requires the error handler to call complete() in onError() and error handler doesn't, the container must. Mark