Connection header override

Hello! Tomcat 9.0.x I'd like to force connection closure on some endpoints. I'm trying this on a simple JSP page. If I call response.setHeader("Connection","close"), I see that the response has "Connection: close, keep-alive". I assume Tomcat inserts the keep-alive part. It looks like the

Re: CurrentThreads not increasing in Apache Tomcat/9.0.37

On 25/09/2020 22:29, Vicente Perez wrote: > >Look in the logs for a line that contains: > 24-Sep-2020 17:00:13.744 INFO [main] org.apache.coyote.AbstractProtocol.init > Initializing ProtocolHandler ["http-nio-8080"] > > 24-Sep-2020 17:00:13.407 INFO [main] >

Re: Tomcat's support for path parameters can expose resources despite reverse proxy access restrictions

Christopher Schultz wrote: >> Well yeah, it’s not like Envoy is a super niche proxy. We also found >> the exact same issue in two other proxies in our network by the way. >> Any proxy that does not consider path parameters when doing >> path-based access control will have this issue when