https://bz.apache.org/bugzilla/show_bug.cgi?id=60594

--- Comment #21 from Coty Sutherland <csuth...@redhat.com> ---
Can anyone see any adverse affects to adding angle brackets to the whitelist? I
have a customer that is using unencoded angle brackets around their session IDs
in the URL which they can't change at this point and the CVE fix broke their
application. If there aren't any adverse affects I'll add them to the list for
my distribution, and to tomcat if anyone else needs them.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to