Hello All,
We are running Tomcat 8.5.13 on Linux, mostly as a container for
Geoserver. We have a few apps (in Flash!) that have been running fine
untouched for at least six years but stopped working a few weeks ago. I
believe the issue appeared before we upgraded from Tomcat 6.0.24,
probably after a security patch. For that and other reasons we
upgraded, but the problem persists.
I believe the problem is that a "loose" URL encoding that was previously
being allowed to go through is now being stopped and returning a code
400 Bad Request. I narrowed down the culprit to this portion of the xml
filter at the end of the url string:
<PropertyIsLike wildCard="*" escape="\" singleChar="?">
which the browser encodes as:
%3CPropertyIsLike%20wildCard=%22*%22%20escape=%22\%22%20singleChar=%22?%22%3E
Note that the "*", "\" and "?" remain not encoded. If I replace
(encode) these the request is sent on through.
My question: can I configure Tomcat to return to the the previous
behavior of allowing this request? I cannot change the Flash apps
Thanks,
Steve
--
Stephen Crawford
Center for Environmental Informatics
The Pennsylvania State University
src...@psu.edu
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
