Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-17 Thread Mark Thomas
On 17/09/2024 13:46, manjosh ramesh wrote: Hi Mark, What is strange is that we are obtaining the cookie by triggering an HTTP request to a spring-boot application running on Tomcat. The same tomcat server adds '^M$' at the end of each line in the response. If we redirect this response to a file

Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-17 Thread manjosh ramesh
Hi Mark, What is strange is that we are obtaining the cookie by triggering an HTTP request to a spring-boot application running on Tomcat. The same tomcat server adds '^M$' at the end of each line in the response.  If we redirect this response to a file and use a cookie, Tomcat rejects it. Regard

[ANN] Apache Tomcat 9.0.95 available

2024-09-17 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.95. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.95 is a bugfix and feat

Re: [Bug 69325] Tomcat not allowing CRLF characters in Request headers

2024-09-17 Thread Mark Thomas
On 17/09/2024 04:44, manjosh ramesh wrote: Hi,ok, so this was a bug in older tomcat release and has been fixed in newer version, is it? Yes. Could you please share the bug id for this change? No. Not every fix is associated with a bug ID since not every issue is raised via the issue tr