Hi Stephen,

Depending on the version of Tomcat you upgraded to, you might be affected by 
the “Add additional checks for valid characters to the HTTP request line 
parsing so invalid request lines are rejected sooner. (markt)” that went into 
7.0.73.

REF: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html

This will block the requests you reference below since they are not URL 
encoded.  We had lots of JSON passing around in our application that broke with 
this change.  Had to update everything and all our PostMAN tests to use encoded 
parameters.

Chris Snider
Senior Software Engineer
Intelligent Software Solutions, A Polaris Alpha Company
[Description: Description: Description: cid:image001.png@01CA1F1F.CBC93990]

From: Andrea Aime [mailto:andrea.a...@geo-solutions.it]
Sent: Thursday, April 13, 2017 9:35 AM
To: Stephen Crawford <src...@psu.edu>
Cc: geoserver-users@lists.sourceforge.net
Subject: Re: [Geoserver-users] bad request

Hi,
I'd look into what's around GeoServer, by itself GeoServer reports errors with 
a 200 and the details
in a XML encoded ServiceException, this 400 does not seem like it would be 
coming from it
(at least not directly)

Cheers
Andrea


On Thu, Apr 13, 2017 at 5:19 PM, Stephen Crawford 
<src...@psu.edu<mailto:src...@psu.edu>> wrote:
Hi All,

I have an app that has been running for 8 or so years using a WFS request with 
a <PropertyIsLike> filter.  Last week the request stopped working and returns a 
400 BAD REQUEST.  If I change the filter to <PropertyIsEqualTo> then it works.  
We we running geoserver 2.5.5.  The issue prompted us to finally upgrade to 
2.11 but the issue persists.  Previous to our upgrade we had made no changes to 
software at all except Tomcat security patches.  It seems to me that the 
request doesn't get all the way to Geoserver for there is no return xml.

Any thoughts?  Query is below.  First query is the original that no longer 
works, the second is the query changed to <PropertyIsEqualTo> which does work.

http://geo.cei.psu.edu:8080/geoserver/wfs?version=1.0.0&request=GetFeature&typeName=cei:taxon_acres08_48&PropertyName=the_geom,areasymbol,compname,total,gid,areaname,class,sdmlegac,semac,cordate&Filter=<Filter><Or><PropertyIsLike
 wildCard="*" escape="\" 
singleChar="?"><PropertyName>compname</PropertyName><Literal>lucy</Literal></PropertyIsLike><PropertyIsLike
 wildCard="*" escape="\" 
singleChar="?"><PropertyName>compname</PropertyName><Literal>LUCY</Literal></PropertyIsLike></Or></Filter>

http://geo.cei.psu.edu:8080/geoserver/wfs?version=1.0.0&request=GetFeature&typeName=cei:taxon_acres08_48&PropertyName=the_geom,areasymbol,compname,total,gid,areaname,class,sdmlegac,semac,cordate&Filter=<Filter><Or><PropertyIsEqualTo><PropertyName>compname</PropertyName><Literal>lucy</Literal></PropertyIsEqualTo><PropertyIsEqualTo><PropertyName>compname</PropertyName><Literal>LUCY</Literal></PropertyIsEqualTo></Or></Filter>

Thanks,
Steve


--

Stephen Crawford

Center for Environmental Informatics

The Pennsylvania State University

src...@psu.edu<mailto:src...@psu.edu>

814.865.9905<tel:(814)%20865-9905>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net<mailto:Geoserver-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/geoserver-users



--
==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054  Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39  339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i 
file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo 
è consentito esclusivamente al destinatario del messaggio, per le finalità 
indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne 
il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di 
procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro 
sistema. Conservare il messaggio stesso, divulgarlo anche in parte, 
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, 
costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.



The information in this message and/or attachments, is intended solely for the 
attention and use of the named addressee(s) and may be confidential or 
proprietary in nature or covered by the provisions of privacy act (Legislative 
Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in 
accord with its purpose, any disclosure, reproduction, copying, distribution, 
or either dissemination, either whole or partial, is strictly forbidden except 
previous formal approval of the named addressee(s). If you are not the intended 
recipient, please contact immediately the sender by telephone, fax or e-mail 
and delete the information in this message that has been received in error. The 
sender does not give any warranty or accept liability as the content, accuracy 
or completeness of sent messages and accepts no responsibility  for changes 
made after they were sent or for other risks which arise as a result of e-mail 
transmission, viruses, etc.

-------------------------------------------------------
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to