remm 2002/08/15 10:42:57 Modified: catalina/src/share/org/apache/catalina/authenticator AuthenticatorBase.java Log: - Remove double URI decoding. - This could improve performance as well as fix i18n issues. - This may have been a security issue. - Reported by Juergen Pill <Juergen.Pill at softwareag.com> Revision Changes Path 1.33 +4 -5 jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java Index: AuthenticatorBase.java =================================================================== RCS file: /home/cvs/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java,v retrieving revision 1.32 retrieving revision 1.33 diff -u -r1.32 -r1.33 --- AuthenticatorBase.java 9 Jun 2002 02:19:41 -0000 1.32 +++ AuthenticatorBase.java 15 Aug 2002 17:42:57 -0000 1.33 @@ -766,7 +766,6 @@ String contextPath = hreq.getContextPath(); if (contextPath.length() > 0) uri = uri.substring(contextPath.length()); - uri = RequestUtil.URLDecode(uri); // Before checking constraints String method = hreq.getMethod(); for (int i = 0; i < constraints.length; i++) { if (debug >= 2)
-- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>