-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sid,

On 5/4/2009 10:20 PM, Sid Sidney wrote:
> One thing I've just found out is that if I enable the  <valve> 
> RequestDumperValue</valve>
> The post data becomes available to the login.jsp. 
> 
>  <Valve className="org.apache.catalina.valves.RequestDumperValve"/>

That's an interesting hack: the RequestDumperValve works by
siphoning-off the POST data and /also/ storing those parameters into the
request such that request.getParameter() and friends all work properly.
Since the valve operates /before/ the security valve, you get the added
benefit of your parameters working in the login page.

> I'm going to have to look more at this.

Check to see how the RequestDumperValve populated the request's
parameter map. Maybe that would help you (or a TC dev) create a patch
for this issue.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkoAO40ACgkQ9CaO5/Lv0PBswwCfcW8aZsXlesvDWvNtuamEfzBZ
hDQAoLW2+X7bFDi3ETIW/dPnQWso/EdG
=JQIR
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to