Author: markt Date: Fri Dec 11 17:14:26 2009 New Revision: 889707 URL: http://svn.apache.org/viewvc?rev=889707&view=rev Log: Remove docs for valve that was replaced with filter
Modified: tomcat/trunk/webapps/docs/config/valve.xml Modified: tomcat/trunk/webapps/docs/config/valve.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/valve.xml?rev=889707&r1=889706&r2=889707&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/config/valve.xml (original) +++ tomcat/trunk/webapps/docs/config/valve.xml Fri Dec 11 17:14:26 2009 @@ -583,47 +583,6 @@ </section> -<section name="Add Default Character Set Valve"> - - <subsection name="Introduction"> - - <p>The HTTP specification is clear that if no character set is specified for - media sub-types of the "text" media type, the ISO-8859-1 character set must - be used. However, browsers may attempt to auto-detect the character set. - This may be exploited by an attacker to perform an XSS attack. Internet - Explorer has this behaviour by default. Other browsers have an option to - enable it.</p> - - <p>This valve prevents the attack by explicitly setting a character set. - Unless the provided character set is explicitly overridden by the user the - browser will adhere to the explicitly set character set, thus preventing the - XSS attack.</p> - - <p>This Valve may be used at the <code>Engine</code>, <code>Host</code> or - <code>Context</code> level as required. Normally, this Valve would be used - at the <code>Engine</code> level.</p> - - </subsection> - - <subsection name="Attributes"> - - <p>The <strong>Add Default Character Set Valve</strong> supports the - following configuration attributes:</p> - - <attributes> - - <attribute name="className" required="true"> - <p>Java class name of the implementation to use. This MUST be set to - <strong>org.apache.catalina.valves.AddDefaultCharsetValve</strong>.</p> - </attribute> - - </attributes> - - </subsection> - -</section> - - <section name="Remote IP Valve"> <subsection name="Introduction"> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org