Re: Session loss with filter enabled

2023-04-14 Thread Kevin Huntly
Trying to make a PCI-DSS compliant installation. It looks like this filter does everything that Apache can do with config files, so I'll leave it out. Kevin Huntly Email: kmhun...@gmail.com Cell: 716/424

Re: Session loss with filter enabled

2023-04-14 Thread Mark Thomas
On 13/04/2023 23:03, Kevin Huntly wrote: Hello, With this filter enabled in Tomcat's web.xml: httpHeaderSecurity org.apache.catalina.filters.HttpHeaderSecurityFilter true My sessions are being immediately lost. If I comment out the filter, everythis is fine.

Session loss with filter enabled

2023-04-13 Thread Kevin Huntly
Hello, With this filter enabled in Tomcat's web.xml: httpHeaderSecurity org.apache.catalina.filters.HttpHeaderSecurityFilter true My sessions are being immediately lost. If I comment out the filter, everythis is fine. What does this filter actually do, and

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-06 Thread Cherio
t;>> supplied by Tomcat in an identically named JAR. Sometime during > >>> java/Tomcat > >>> startup these libraries are being loaded in a different order > >>> depending > >>> on > >>> the tomcat version. The order is reliably different

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Mark Thomas
e libraries are being loaded in a different order depending on the tomcat version. The order is reliably different and reproducible. Kudos for tracking this down. The conclusion is that Tomcat indeed implements Filter lifecycle annotation processing but it does not run when those annotations are

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Cherio
> java/Tomcat > > startup these libraries are being loaded in a different order depending > > on > > the tomcat version. The order is reliably different and reproducible. > > Kudos for tracking this down. > > > The conclusion is that Tomcat indeed implements Filte

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Mark Thomas
named JAR. Sometime during java/Tomcat startup these libraries are being loaded in a different order depending on the tomcat version. The order is reliably different and reproducible. Kudos for tracking this down. The conclusion is that Tomcat indeed implements Filter lifecycle annotation proc

AW: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Thomas Hoffmann (Speed4Trade GmbH)
> -Ursprüngliche Nachricht- > Von: Cherio > Gesendet: Dienstag, 5. April 2022 17:17 > An: Tomcat Users List > Betreff: Re: PostConstruct annotation in a filter since version 9.0.60 > > I did ran the diffs between versions. With my naked eye I didn't spot >

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Cherio
at startup these libraries are being loaded in a different order depending on the tomcat version. The order is reliably different and reproducible. The conclusion is that Tomcat indeed implements Filter lifecycle annotation processing but it does not run when those annotations are loaded from the a

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Cherio
te the problem, but this is not likely: > https://github.com/apache/tomcat/compare/9.0.59...9.0.60 > No relevant changes, so Tomcat's annotation scanning behavior won't change. > > The DefaultInstanceManager is used, it seems it wasn't used before > then. Since y

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Rémy Maucherat
;s annotation scanning behavior won't change. The DefaultInstanceManager is used, it seems it wasn't used before then. Since you're using Spring, maybe the problem could come from there ? > > The code that adds the filter is super simple: > > FilterRegistration.Dynamic f

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Cherio
.org/dist/tomcat/tomcat-$MAJOR_VER/v$VER/bin/apache-tomcat-$VER.tar.gz > > BTW @PostConstruct doesn't have to do with dependency injection. It is > about lifecycle processing. > > The change in behavior was narrowed down to switching versions from 9.0.59 > to 9.0.60. > >

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-05 Thread Cherio
down to switching versions from 9.0.59 to 9.0.60. The code that adds the filter is super simple: FilterRegistration.Dynamic filterName = servletContext.addFilter(FILTER_NAME, filterObject); sessionContextFilter.addMappingForUrlPatterns(EnumSet.of(DispatcherType.REQUEST), true, "/*");

Re: PostConstruct annotation in a filter since version 9.0.60

2022-04-03 Thread Konstantin Kolinko
e can match it to source code and see at what step in the startup sequence it happened. 2. You say that it is a javax.servlet.Filter and it is coded so that Tomcat will not be able to create an instance of that class - proper creation of an instance of that filter must be done by Spring, so t

Aw: PostConstruct annotation in a filter since version 9.0.60

2022-04-03 Thread Peter Rader
Fax: 0049 (0)30 / 6 29 33 29 6 Handy: 0049 (0)176 / 87 521 576 Handy: 0049 (0)176 / 47 876 303     Gesendet: Freitag, 01. April 2022 um 23:02 Uhr Von: "Cherio" An: users@tomcat.apache.org Betreff: PostConstruct annotation in a filter since version 9.0.60 I observed an announced change i

PostConstruct annotation in a filter since version 9.0.60

2022-04-01 Thread Cherio
I observed an announced change in behavior in version 9.0.60 (and later). My application has a Spring class loaded as a javax.servlet.Filter. It has a method annotated with a PostConstruct annotation. Up until Tomcat 9.0.59 the annotation was handled by Spring. Starting with Tomcat 9.0.60 behavior

Re: Obtaining jvmRoute from filter

2022-01-19 Thread Christopher Schultz
have access to the engine, service, etc. I could make it a configurable setting of the Filter, with "Catalina" being the default. Is there any other way to get the service name from within a running Tomcat? Via the servletcontext? You should be able to work up the contect -> Ho

Re: Obtaining jvmRoute from filter

2022-01-14 Thread Mark Thomas
could make it a configurable setting of the Filter, with "Catalina" being the default. Is there any other way to get the service name from within a running Tomcat? Via the servletcontext? You should be able to work up the contect -> Host ->

Re: Obtaining jvmRoute from filter

2022-01-14 Thread Christopher Schultz
Mark, On 1/14/22 02:51, Mark Thomas wrote: On 13/01/2022 21:31, Christopher Schultz wrote: All, Does anyone know if it's possible and/or convenient to fetch the jvmRoute from a servlet filter? I'd like to write a Filter that puts some information like this into the respon

Re: Obtaining jvmRoute from filter

2022-01-13 Thread Mark Thomas
On 13/01/2022 21:31, Christopher Schultz wrote: All, Does anyone know if it's possible and/or convenient to fetch the jvmRoute from a servlet filter? I'd like to write a Filter that puts some information like this into the response headers:   X-App-Server-IP: 10.0.0.1   X-

Obtaining jvmRoute from filter

2022-01-13 Thread Christopher Schultz
All, Does anyone know if it's possible and/or convenient to fetch the jvmRoute from a servlet filter? I'd like to write a Filter that puts some information like this into the response headers: X-App-Server-IP: 10.0.0.1 X-App-Server-Route: jvmRoute Is it possible t

Servlet filter execution ordering

2021-04-23 Thread Christopher Schultz
All, When building a filter chain to execute for a request, the spec says that the ordering is "as declared in the deployment descriptor". These is an example in the spec language but I wanted to be absolutely sure I understand this. The ordering of the elements in web.xml is no

RE: Sporadic failure of load a servlet filter

2020-10-10 Thread BOSECKER Nancy
- Context [/xx] startup failed due to >> previous errors 2020-10-09T13:04:40.251213700-07:00[America/Los_Angeles] >> >> Sometimes, shutting down Tomcat and restarting is enough, or shutting down >> and waiting a few minutes and restarting works. >> I'm us

Re: Sporadic failure of load a servlet filter

2020-10-09 Thread Christopher Schultz
ue to > previous errors 2020-10-09T13:04:40.251213700-07:00[America/Los_Angeles] > > Sometimes, shutting down Tomcat and restarting is enough, or shutting down > and waiting a few minutes and restarting works. > I'm using 8.5.5 on Windows when I see this. Have you looked at th

Sporadic failure of load a servlet filter

2020-10-09 Thread BOSECKER Nancy
Hi- I have a servlet that loads when Tomcat is started. It's loaded from xml: There isn't anything special about this particular one, but I've noticed that Tomcat fails to load it sporadically with: 2020-10-09 13:04:40,250 [org.apache.catalina.core.StandardContext startInternal ] SEVERE

Re: Adding regular expression support to CORS filter

2020-10-06 Thread Carsten Klein
atchers which implement the optimal strategy for a particular value would be a good way to do this. A single matcher could be used for really simple values and maybe a MultipleMatcher could be used for multiple different value-checks. Something like that will likely lead to the highest-performing filter

Re: Adding regular expression support to CORS filter

2020-09-27 Thread Christopher Schultz
r really simple values and maybe a MultipleMatcher could be used for multiple different value-checks. Something like that will likely lead to the highest-performing filter processing. -chris - To unsubscribe, e-mail: users-

Re: Adding regular expression support to CORS filter

2020-09-27 Thread Carsten Klein
Any comments on that? Is it worth preparing a PR?

Adding regular expression support to CORS filter

2020-09-21 Thread Carsten Klein
Hi there, I'd like to contribute a CORS filter enhancement, making it accept both wildcard-based and 'regular expression'-based expressions for its allowed origins list. I know this from a project based on Jetty, which has support for, at least, simple wildcard matching

HTTP Header Security Filter (antiClickJackingEnabled x-frame-options) doesn't work with mod_proxy as expected

2020-06-25 Thread Michele Mase'
I'm trying to configure the header x-frame-options in tomcat8 web.xml: httpHeaderSecurity org.apache.catalina.filters.HttpHeaderSecurityFilter true antiClickJackingOption SAMEORIGIN httpHeaderSecurity /* REQUEST Te

Re: How to write a filter in web.xml to accept partially a URL ?

2020-04-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Gilbert, On 4/25/20 08:47, Gilbert Soucy wrote: > Hello, > > I am new to tomcat and I need to filter the URLs to accept all > clients for part of a URL and reject for all clients another part > of this URL. > > In details, I w

Re: How to write a filter in web.xml to accept partially a URL ?

2020-04-25 Thread Frank Tornack
Hi Gilbert, maybe you have more luck with the security-constraint in tomcat. kindly Frank Am Samstag, den 25.04.2020, 08:47 -0400 schrieb Gilbert Soucy: > Hello, > > I am new to tomcat and I need to filter the URLs to accept all > clients for > part of a URL and reject for all

How to write a filter in web.xml to accept partially a URL ?

2020-04-25 Thread Gilbert Soucy
Hello, I am new to tomcat and I need to filter the URLs to accept all clients for part of a URL and reject for all clients another part of this URL. In details, I want: /abc/def/xyz/* : accepts all /abc/def/*: reject if URL does not match /abc/def/xyz* I found that the

Re: cors filter in WEB-INF/web.xml

2018-07-31 Thread Luis Rodríguez Fernández
Hello Masber, In order to get accurate answers it would be helpful if you could provide details like: - Platform details: OS, jdk/jre, apache-tomcat version... - "I went through documentation" which one? perhaps https://tomcat.apache.org/tomcat-9.0-doc/config/filter.html#CORS_Filter - "my web cli

cors filter in WEB-INF/web.xml

2018-07-28 Thread masber masber
Dear Apache Tomcat community, I am learning Tomcat and would like to create a crosfilter, I went through the documentation and added the code suggested but my web client still complains. This is the content of my web.xml file: Archetype Created Web Application jersey-se

Re: [EXTERNAL] Re: Configuring CORS filter

2018-06-20 Thread Bradley, Richard
[FID 23621] > > > > Apache Software Foundation reports this in annou...@tomcat.apache.org > > <https://lists.apache.org/list.html?annou...@tomcat.apache.org>: > > > > CVE-2018-8014 Insecure defaults for CORS filter > > > > and the only mitigation is

Re: Configuring CORS filter

2018-06-20 Thread Mark Thomas
rior To 8.5.32 > [FID 23621] > > Apache Software Foundation reports this in annou...@tomcat.apache.org > <https://lists.apache.org/list.html?annou...@tomcat.apache.org>: > > CVE-2018-8014 Insecure defaults for CORS filter > > and the only mitigation is to "Conf

Configuring CORS filter

2018-06-20 Thread Bradley, Richard
...@tomcat.apache.org <https://lists.apache.org/list.html?annou...@tomcat.apache.org>: CVE-2018-8014 Insecure defaults for CORS filter and the only mitigation is to "Configure the filter appropriately for your environment" My question is: What if you don't have a CORS filter configured anywh

[SECURITY] CVE-2018-8014 Insecure defaults for CORS filter

2018-05-16 Thread Mark Thomas
CVE-2018-8014 Insecure defaults for CORS filter Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.8 Apache Tomcat 8.5.0 to 8.5.31 Apache Tomcat 8.0.0.RC1 to 8.0.52 Apache Tomcat 7.0.41 to 7.0.88 Description: The defaults settings for the CORS

How to make Tomcat 7.0.52 and newer ones compatible regarding filter HttpHeaderSecurity?

2018-01-30 Thread Thorsten Schöning
Hi all, in production I'm still running Ubuntu 14.04 LTS Server which provides Tomcat 7.0.52, which doesn't contain the filter for HttpHeaderSecurity yet[1]. Some of my customers on the other hand use Windows and run newer versions of Tomcat which already support that filter. To

Re: capturing response output in filter

2018-01-29 Thread Robert J. Carr
On Mon, Jan 29, 2018 at 9:27 AM, Mark Thomas wrote: > > On 29/01/18 17:19, Robert J. Carr wrote: > > I have a Filter that uses the output stream from the response of the > > servlet in the chain. In order to do this I create a custom response > > wrapper that has a cust

Re: capturing response output in filter

2018-01-29 Thread Mark Thomas
On 29/01/18 17:19, Robert J. Carr wrote: > I have a Filter that uses the output stream from the response of the > servlet in the chain. In order to do this I create a custom response > wrapper that has a custom servlet output stream. > > This works fine, but in moving to a ne

capturing response output in filter

2018-01-29 Thread Robert J. Carr
I have a Filter that uses the output stream from the response of the servlet in the chain. In order to do this I create a custom response wrapper that has a custom servlet output stream. This works fine, but in moving to a newer Java EE API there have been a couple new (abstract) methods added

Re: How to properly map a filter in tomcat embedded

2016-08-28 Thread John D. Ament
On Sun, Aug 28, 2016 at 5:07 AM Mark Thomas wrote: > On 28 August 2016 02:33:00 BST, "John D. Ament" > wrote: > >Hi, > > > >I have this pretty straight forward case of starting an instance of > >tomcat > >and bringing in a filter. > > >

Re: How to properly map a filter in tomcat embedded

2016-08-28 Thread Mark Thomas
On 28 August 2016 02:33:00 BST, "John D. Ament" wrote: >Hi, > >I have this pretty straight forward case of starting an instance of >tomcat >and bringing in a filter. >When starting this up (Just running in a plain JUnit test), the >container >is running ho

How to properly map a filter in tomcat embedded

2016-08-27 Thread John D. Ament
Hi, I have this pretty straight forward case of starting an instance of tomcat and bringing in a filter. Tomcat tomcat = new Tomcat(); tomcat.setPort(8080); File base = new File("."); Context ctx = tomcat.addContext("", base.getAbsolutePat

Tomcat CORS filter not allowing origin with file:// when resource access done from WebView

2016-08-19 Thread Chandrashekar H . S
Hi, We are facing a problem in tomcat cors filter. Below is the filter configurations added in web.xml for cors request processing. CorsFilter org.apache.catalina.filters.CorsFilter cors.allowed.origins * cors.allowed.methods GET,POST,HEAD,OPTIONS,PUT

Re: Remote Address/Host Filter per connector ..

2016-07-07 Thread tomcat
ress/host filter so that request to one of the ports (12345) are allowed only via localhost ? And requests to other port (54321) are allowed from everywhere. Or do I need to configure multiple service elements for this type of requirement ? It is possible to filter by port number,

Re: Remote Address/Host Filter per connector ..

2016-07-07 Thread Konstantin Kolinko
2016-07-07 12:57 GMT+03:00 Amit Pande : > Hello all, > > > In my server.xml, within in single Service element, > > I have two HTTP connectors defined listening on two different ports (12345 > & 54321 for example). > > It is possible to apply the remote address/host

Re: Remote Address/Host Filter per connector ..

2016-07-07 Thread tomcat
istening on two different ports (12345 & 54321 for example). It is possible to apply the remote address/host filter so that request to one of the ports (12345) are allowed only via localhost ? And requests to other port (54321) are allowed from everywhere. You do not indicate your Tomcat vers

Re: Remote Address/Host Filter per connector ..

2016-07-07 Thread Amit Pande
all, >> >> >> In my server.xml, within in single Service element, >> >> I have two HTTP connectors defined listening on two different ports >>(12345 >> & 54321 for example). >> >> It is possible to apply the remote address/host filter so that

Re: Remote Address/Host Filter per connector ..

2016-07-07 Thread tomcat
On 07.07.2016 11:57, Amit Pande wrote: Hello all, In my server.xml, within in single Service element, I have two HTTP connectors defined listening on two different ports (12345 & 54321 for example). It is possible to apply the remote address/host filter so that request to one of the p

Remote Address/Host Filter per connector ..

2016-07-07 Thread Amit Pande
Hello all, In my server.xml, within in single Service element, I have two HTTP connectors defined listening on two different ports (12345 & 54321 for example). It is possible to apply the remote address/host filter so that request to one of the ports (12345) are allowed only via local

Re: using filter on web.xml

2016-05-15 Thread Francesco Viscomi
Thanks Andrè. the login page indeed has nothing inside, i just want to activate the filter, because inside the filter there is the logic to authenticate the user; Anyway i really appreciate your suggestion. Francesco 2016-05-15 14:09 GMT+02:00 André Warnier (tomcat) : > On 15.05.2016 13

Re: using filter on web.xml

2016-05-15 Thread tomcat
On 15.05.2016 13:58, Francesco Viscomi wrote: Hi all, I've declared a filter in web.xm as: ShibbolethHeaderReaderFilter ShibbolethHeaderReaderFilter IdPC it.loset.idpcp.ri.filters.ShibbolethHeaderReaderFilte

using filter on web.xml

2016-05-15 Thread Francesco Viscomi
Hi all, I've declared a filter in web.xm as: ShibbolethHeaderReaderFilter ShibbolethHeaderReaderFilter IdPC it.loset.idpcp.ri.filters.ShibbolethHeaderReaderFilterIdpc configurationFile resources/shibboleth-spp-confi

Re: antiClickJackingUri syntax in HTTP header security filter definition

2016-05-09 Thread Violeta Georgieva
Hi, 2016-05-05 13:58 GMT+03:00 Ruan van Tonder : > > Good day > > We are running Apache Tomcat 7.0.64 on Windows Server 2012 R2. Currently we have an issue where an application page which we are using is being framed by another and due to the default settings in the HTTP header securi

antiClickJackingUri syntax in HTTP header security filter definition

2016-05-05 Thread Ruan van Tonder
Good day We are running Apache Tomcat 7.0.64 on Windows Server 2012 R2. Currently we have an issue where an application page which we are using is being framed by another and due to the default settings in the HTTP header security filter is not being allowed to be displayed in Internet

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-30 Thread Lyallex
snip > Unfortunately, it looks like Tomcat doesn't support setting the response > code for the redirect. That sounds like it would be a nice thing to be > able to configure. Care to file a bug? Done Bug 59399 - Tomcat doesn't support setting the response code for http -> https redirect > You co

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-30 Thread Lyallex
On 29 April 2016 at 19:49, Christopher Schultz wrote: > Lyallex, > > On 4/29/16 12:50 AM, Lyallex wrote: >> On 28 April 2016 at 23:04, Christopher Schultz >> wrote: snip > 1. You want to redirect requests to hostnames not on your whitelist to > HTTPS (url-rewrite) > 2. You want to redirect every

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-29 Thread Christopher Schultz
Lyallex, On 4/29/16 12:50 AM, Lyallex wrote: > On 28 April 2016 at 23:04, Christopher Schultz > wrote: > Lyallex, > > On 4/28/16 1:12 PM, Lyallex wrote: >>>> apache-tomcat-7.0.42 jdk1.8.0_77 CentOS Linux 7.2.1511 >>>> urlrewritefilter-4.0.3.jar >>&

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-29 Thread Lyallex
On 29 April 2016 at 14:57, André Warnier (tomcat) wrote: > On 29.04.2016 12:52, Lyallex wrote: >> >> On 29 April 2016 at 08:44, André Warnier (tomcat) wrote: >>> >>> On 29.04.2016 08:59, Lyallex wrote: The problem is despite setting the to-type to permanent-redirect I'm >>

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-29 Thread tomcat
On 29.04.2016 12:52, Lyallex wrote: On 29 April 2016 at 08:44, André Warnier (tomcat) wrote: On 29.04.2016 08:59, Lyallex wrote: The problem is despite setting the to-type to permanent-redirect I'm actually getting a 302 temporary-redirect. I know this is probably off topic but if anyone h

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-29 Thread Lyallex
On 29 April 2016 at 08:44, André Warnier (tomcat) wrote: > On 29.04.2016 08:59, Lyallex wrote: >> >> The problem is despite setting the to-type to permanent-redirect I'm actually getting a 302 temporary-redirect. I know this is probably off topic but if anyone has any experienc

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-29 Thread tomcat
On 29.04.2016 08:59, Lyallex wrote: The problem is despite setting the to-type to permanent-redirect I'm actually getting a 302 temporary-redirect. I know this is probably off topic but if anyone has any experience of this I'd be gratefull to hear how you solved it If this was Apache httpd,

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-28 Thread Lyallex
e to reply. Unfortunately, rather than solving the problem it *is* the problem (as far as I can figure out anyway) If I take the rewrite filter out of the picture the configuration I have is as follows web.xml /* CONFIDENTIAL server.xml

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-28 Thread Lyallex
On 28 April 2016 at 23:04, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Lyallex, > > On 4/28/16 1:12 PM, Lyallex wrote: >> apache-tomcat-7.0.42 jdk1.8.0_77 CentOS Linux 7.2.1511 >> urlrewritefilter-4.0.3.jar >> >&

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lyallex, On 4/28/16 1:12 PM, Lyallex wrote: > apache-tomcat-7.0.42 jdk1.8.0_77 CentOS Linux 7.2.1511 > urlrewritefilter-4.0.3.jar > > I'm using the rewrite filter from http://tuckey.org/urlrewrite/ > > I have a rule, it

Re: Any experience with Tuckey UrlRewrite servlet filter?

2016-04-28 Thread jieryn
filter-4.0.3.jar > > I'm using the rewrite filter from http://tuckey.org/urlrewrite/ > > I have a rule, it's supposed to 301 perm-redirect from http to https > > >seo redirect >^www.example.com >^localhost >^/(.*) >

Any experience with Tuckey UrlRewrite servlet filter?

2016-04-28 Thread Lyallex
apache-tomcat-7.0.42 jdk1.8.0_77 CentOS Linux 7.2.1511 urlrewritefilter-4.0.3.jar I'm using the rewrite filter from http://tuckey.org/urlrewrite/ I have a rule, it's supposed to 301 perm-redirect from http to https seo redirect ^www.example.com

Re: Cors-Filter

2016-02-26 Thread RICHARD DOUST
> On Feb 26, 2016, at 3:40 PM, Christopher Schultz > wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Jose, > > On 2/26/16 7:08 AM, Jose María Zaragoza wrote: >> 2016-02-26 9:08 GMT+01:00 RICHARD DOUST : >>> My question is, why doesn't it work, or, how can I debug it? >> >> Are

Re: Cors-Filter

2016-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jose, On 2/26/16 7:08 AM, Jose María Zaragoza wrote: > 2016-02-26 9:08 GMT+01:00 RICHARD DOUST : >> My question is, why doesn't it work, or, how can I debug it? > > Are you tested to allow to all origins (default option) ? Only for > testing purpose

Re: Cors-Filter

2016-02-26 Thread Jose María Zaragoza
2016-02-26 9:08 GMT+01:00 RICHARD DOUST : > My question is, why doesn't it work, or, how can I debug it? Are you tested to allow to all origins (default option) ? Only for testing purpose, I mean: cors.allowed.origins * At first sight, your settings should work, but ... > I guess I'm going to

Re: Cors-Filter

2016-02-26 Thread tomcat
Hi. On this list, it is preferred to not top-post, but respond in-line or below the previous intervention. Re : http://tomcat.apache.org/lists.html#tomcat-users -> important -> 6 It makes it easier to follow the conversation, and for people with small screens, to avoid scrolling up and down all

Re: Cors-Filter

2016-02-26 Thread RICHARD DOUST
There's no doubt in my mind that this is considered a cross-domain request. The question is, why is it not being allowed given the configuration. The domain that requested the original page (via http) is specifically set to be allowed to access the site in a cross-domain scenario. My question is

Re: Cors-Filter

2016-02-25 Thread tomcat
On 25.02.2016 22:59, RICHARD DOUST wrote: Hi, I’m running Tomcat 7.0. Can’t find the version.bat file, so I don’t know more than that. It’s installed on a Windows computer running Windows Server 2003 DataCenter Edition. (How’s that for refusing to upgrade?) Anyway, it’s a client’s box. I’m tr

Cors-Filter

2016-02-25 Thread RICHARD DOUST
Hi, I’m running Tomcat 7.0. Can’t find the version.bat file, so I don’t know more than that. It’s installed on a Windows computer running Windows Server 2003 DataCenter Edition. (How’s that for refusing to upgrade?) Anyway, it’s a client’s box. I’m trying to migrate an application to JavaScript

RE: servlet filter not working over virtual directories in tomcat

2015-10-25 Thread Pradyut Bhattacharya
Hi Andre, As Mark stated earlier - With a context.xml file named TestApp#web.xml you have a defined a new web application with a context path of "/TestApp/web" and a docBase of "C:\web" This holds true here. Any filter inside “TestApp” would not be able to catch t

Re: servlet filter not working over virtual directories in tomcat

2015-10-24 Thread tomcat
xplanation : in and , the is *relative to the webapp context*. In your case, because of the way you have configured this, the webapp has a context of "/TestApp/web". Therefore, if you want the filter to apply to everything under "/TestApp/web", you have to map it to "/

RE: servlet filter not working over virtual directories in tomcat

2015-10-23 Thread Pradyut Bhattacharya
b.xml file in the Catalina/localhost folder. This works fine with filters. Regards, Pradyut > Subject: Re: servlet filter not working over virtual directories in tomcat > To: users@tomcat.apache.org > From: ma...@apache.org > Date: Fri, 2

Re: servlet filter not working over virtual directories in tomcat

2015-10-23 Thread Mark Thomas
On 23/10/2015 03:39, Pradyut Bhattacharya wrote: > Hi, > I had configured virtual directories in glassfish3.x over which I could > write filters. > For an example I could access files at c:/web from > http://localhost/TestApp/web over which I could also place a filter at my web

servlet filter not working over virtual directories in tomcat

2015-10-22 Thread Pradyut Bhattacharya
Hi, I had configured virtual directories in glassfish3.x over which I could write filters. For an example I could access files at c:/web from http://localhost/TestApp/web over which I could also place a filter at my web app's web/xml file with dir_filter /web/* Unfortunately Tomca

Re: Rewriting entire request /body in Servlet Filter not working as expected

2015-10-05 Thread Michael Greco
Chrome 45.0.2454.101 m 64 bit > > Windows 7 64 bit > > > > Trying to rewrite the entire request body in a filter using a http > request > > wrapper. Not entirely sure if this is the right approach or even > possible > > but researching similar examples it s

Re: Rewriting entire request /body in Servlet Filter not working as expected

2015-10-05 Thread Mark Thomas
On 04/10/2015 19:03, Michael Greco wrote: > First time post here. > > Using : > Tomcat 8.0.26 > JDK1.8.0 update 51 > Apache MyFaces 2.2.8. > Maven build of webapp war file > Chrome 45.0.2454.101 m 64 bit > Windows 7 64 bit > > Trying to rewrite the entire requ

Re: Rewriting entire request /body in Servlet Filter not working as expected

2015-10-04 Thread Christopher Schultz
bit Thanks. > Trying to rewrite the entire request body in a filter using a http > request wrapper. Not entirely sure if this is the right approach > or even possible but researching similar examples it seems this > approach should work. Created a simple test case with a one page &

Re: Rewriting entire request /body in Servlet Filter not working as expected

2015-10-04 Thread Michael Greco
file >> Chrome 45.0.2454.101 m 64 bit >> Windows 7 64 bit >> >> Trying to rewrite the entire request body in a filter using a http >> request wrapper. Not entirely sure if this is the right approach or even >> possible but researching similar examples it s

Re: Rewriting entire request /body in Servlet Filter not working as expected

2015-10-04 Thread Michael Greco
On Sun, Oct 4, 2015 at 2:03 PM, Michael Greco wrote: > First time post here. > > Using : > Tomcat 8.0.26 > JDK1.8.0 update 51 > Apache MyFaces 2.2.8. > Maven build of webapp war file > Chrome 45.0.2454.101 m 64 bit > Windows 7 64 bit > > Trying to rewrite th

Re: Rewriting entire request /body in Servlet Filter not working as expected

2015-10-04 Thread Michael Greco
hael Greco wrote: > First time post here. > > Using : > Tomcat 8.0.26 > JDK1.8.0 update 51 > Apache MyFaces 2.2.8. > Maven build of webapp war file > Chrome 45.0.2454.101 m 64 bit > Windows 7 64 bit > > Trying to rewrite the entire request body in a filter using a

Rewriting entire request /body in Servlet Filter not working as expected

2015-10-04 Thread Michael Greco
First time post here. Using : Tomcat 8.0.26 JDK1.8.0 update 51 Apache MyFaces 2.2.8. Maven build of webapp war file Chrome 45.0.2454.101 m 64 bit Windows 7 64 bit Trying to rewrite the entire request body in a filter using a http request wrapper. Not entirely sure if this is the right approach

Re: Filter Mapping URL Pattern

2015-09-18 Thread George Sexton
On 9/18/2015 1:57 PM, Caldarale, Charles R wrote: From: George Sexton [mailto:geor...@mhsoftware.com] Subject: Filter Mapping URL Pattern I'm trying to add a filter mapping with the URL-Pattern /*.css Which, unfortunately, isn't allowed. You probably just need to remove the lea

RE: Filter Mapping URL Pattern

2015-09-18 Thread Caldarale, Charles R
> From: George Sexton [mailto:geor...@mhsoftware.com] > Subject: Filter Mapping URL Pattern > I'm trying to add a filter mapping with the URL-Pattern > /*.css Which, unfortunately, isn't allowed. You probably just need to remove the leading slash. > Can som

Filter Mapping URL Pattern

2015-09-18 Thread George Sexton
I'm trying to add a filter mapping with the URL-Pattern /*.css and tomcat (7.0.63) is throwing an error on the deployment descriptor: java.lang.IllegalArgumentException: Invalid filter mapping. at org.apache.catalina.core.StandardContext.validateFilterMap(StandardContext.java: 3136)

Re: TOMCAT 7 , Native CORS FILTER and Spring Security

2015-07-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Maatari, On 7/23/15 10:49 AM, Maatari Daniel Okouya wrote: > Hi, > > I am using TOMCAT 7, and I have enable the CORS FILTER as per the > explanation on the official website: > https://tomcat.apache.org/tomcat-7.0-doc/config/filter.

TOMCAT 7 , Native CORS FILTER and Spring Security

2015-07-23 Thread Maatari Daniel Okouya
Hi,  I am using TOMCAT 7, and I have enable the CORS FILTER as per the explanation on the official website:  https://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter I use the actual configuration:  CorsFilter org.apache.catalina.filters.CorsFilter

Fw: TOMCAT 7 , Native CORS FILTER and Spring Security

2015-07-23 Thread Maatari Daniel Okouya
--  Maatari Daniel Okouya Sent with Airmail On July 23, 2015 at 10:49:19 AM, Maatari Daniel Okouya (okouy...@yahoo.fr) wrote: Hi,  I am using TOMCAT 7, and I have enable the CORS FILTER as per the explanation on the official website:  https://tomcat.apache.org/tomcat-7.0-doc/config

Re: Make Filter Exception Based on Subnet

2015-07-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eric, On 7/14/15 6:24 PM, Eric Robinson wrote: > Our canned tomcat application's web.xml file contains the following > filter... > > SessionFilter > servlet.BlahSession > > SessionFilter > /* > > >

Make Filter Exception Based on Subnet

2015-07-14 Thread Eric Robinson
Our canned tomcat application's web.xml file contains the following filter... SessionFilter servlet.BlahSession SessionFilter /* Is there a way to make this filter not apply to requests that originate from certain IP addresses? -- Eric Robinson

RE: [OT] Re: Filter behaviour

2015-06-29 Thread George Stanchev
tion 4.4) indicating the SOAP processing error." George [1] http://www.w3.org/TR/2000/NOTE-SOAP-2508/#_Toc478383529 -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Monday, June 29, 2015 8:56 AM To: Tomcat Users List Subject: Re: [OT] Re: Filter behaviour Geo

Re: [OT] Re: Filter behaviour

2015-06-29 Thread André Warnier
st Subject: [OT] Re: Filter behaviour On Sat, Jun 27, 2015 at 8:37 AM, Konstantin Kolinko wrote: public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { boolean iAmNotAuthorized = true; if (iAmNot

RE: [OT] Re: Filter behaviour

2015-06-29 Thread George Stanchev
For SOAP, you *MUST* send back 500 or 400 with your SOAP fault back. [1] http://www.w3.org/TR/soap12-part2/#tabresstatereccodes -Original Message- From: Leo Donahue [mailto:donahu...@gmail.com] Sent: Saturday, June 27, 2015 11:45 PM To: Tomcat Users List Subject: [OT] Re: Filter

  1   2   3   4   5   6   7   8   9   >