Henk Fictorie wrote:
Hi,
I think that I've been bitten by a resolved bug in mod_jk 1.2.27. The
changelog is describing this as:
AJP13: Always send initial POST packet even if the client disconnected after
sending request but before providing POST data. In that case or in case the
client broke the connection in a middle of read send an zero size packet
informing container about broken client connection. (mturk)
Your SSO will have to remember the POST data
or use the GET for that. In all other cases this
is security risk of hi-jacking the sessions.
Regards
--
^(TM)
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
