Story #1129
Tomcat needs to be configured to handle \ in URIs
Start date:
2010-12-02
Due date:
% Done:
100%
Story Points:
Sprint:
Description
Tomcat doesn't like \ or its escaped representation (%5C), for security reasons related to proxying. http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.10
(the current encoding specification we use escapes \ to %5C)
Subtasks
History
#1 Updated by Rob Nahf over 13 years ago
- Position set to 1
- Target version set to Sprint-2010.49
- Position deleted (
1)
#2 Updated by Dave Vieglais over 13 years ago
- Target version changed from Sprint-2010.49 to Sprint-2010.50
- Position deleted (
11) - Position set to 2
#3 Updated by Rob Nahf over 13 years ago
- Status changed from New to Closed
configured tomcat to handle escaped backslashes. It might be prudent to check the security hole through a test, to see if it's something we now have to worry about. A separate story will be created for that.
