Hello All, I am using Tomcat 5.5.30 and am affected by the hashtable collision DoS vulnerability. I wanted to know if the Request parameter parsing is always invoked?
Or is it only performed once a servlet asks for a parameter? Meaning if my servlets don't ask for a parameter, then no hashing, then no vulnerability? Thank you.