RE: JSP Exception object arriving null at error handler

2011-09-12 Thread Nadav Katz
- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Sunday, September 11, 2011 5:26 PM To: Tomcat Users List Subject: RE: JSP Exception object arriving null at error handler From: Nadav Katz [mailto:nadav.k...@oracle.com] Subject: RE: JSP Exception object arriving null

JSP Exception object arriving null at error handler

2011-09-11 Thread Nadav Katz
Hi, I seem to be having a problem with the exception object attribute arriving null at the error handeling jsp. Since I encountered this error in production, I recreated on a small project. This is the web.xml error page entry: error-page    

RE: JSP Exception object arriving null at error handler

2011-09-11 Thread Nadav Katz
: Nadav Katz nadav.k...@oracle.com To: Tomcat Users List users@tomcat.apache.org Sent: Sunday, September 11, 2011 2:11 AM Subject: JSP Exception object arriving null at error handler Hi, I seem to be having a problem with the exception object attribute arriving null at the error handeling jsp

RE: CRLF Stripped in Tomcat Response Header

2011-09-04 Thread Nadav Katz
, September 04, 2011 12:58 PM To: Tomcat Users List Subject: Re: CRLF Stripped in Tomcat Response Header On 04/09/2011 05:54, Nadav Katz wrote: Hi All! First, let me assure everyone that I am not a hacker, exactly the opposite, but I have a related problem. I am in the process of implementing code

RE: CRLF Stripped in Tomcat Response Header

2011-09-04 Thread Nadav Katz
Response Header On 04/09/2011 05:54, Nadav Katz wrote: Hi All! First, let me assure everyone that I am not a hacker, exactly the opposite, but I have a related problem. I am in the process of implementing code that protects against header manipulation. I created a filter that strips line feed

RE: CRLF Stripped in Tomcat Response Header

2011-09-04 Thread Nadav Katz
04, 2011 3:10 PM To: Tomcat Users List Subject: Re: CRLF Stripped in Tomcat Response Header On 04/09/2011 12:16, Nadav Katz wrote: Sorry Mark, I just noticed your input regarding the filter. I am really only worried about attackers tampering with request headers. The reason is that we may have

CRLF Stripped in Tomcat Response Header

2011-09-03 Thread Nadav Katz
Hi All! First, let me assure everyone that I am not a hacker, exactly the opposite, but I have a related problem. I am in the process of implementing code that protects against header manipulation. I created a filter that strips line feed and carriage return characters from requests to avoid

RE: Tomcat not conforming to Servlet spec 2.4+ in regards to jsp:include

2011-08-08 Thread Nadav Katz
To: Tomcat Users List Subject: Re: Tomcat not conforming to Servlet spec 2.4+ in regards to jsp:include 2011/8/8 Nadav Katz nadav.k...@oracle.com: \ I have a filter in place for validating CSRF tokens. I only wish to validate requests coming from the client, so no validation for dynamic includes

RE: Tomcat not conforming to Servlet spec 2.4+ in regards to jsp:include

2011-08-08 Thread Nadav Katz
to jsp:include 2011/8/8 Nadav Katz nadav.k...@oracle.com: Thank you for your answer, it hadn't occurred to me to try removing the jsp mapping. Unfortunately it doesn't work...I removed it, and behavior stays the same. I tried setting the STRICT_SERVLET_COMPLIANCE=true (hoping the strict request

Tomcat not conforming to Servlet spec 2.4+ in regards to jsp:include

2011-08-07 Thread Nadav Katz
Hello, I have a filter in place for validating CSRF tokens. I only wish to validate requests coming from the client, so no validation for dynamic includes or forwards. My web.xml for the filter looks like this: filter-mapping         filter-nameCSRFFilter/filter-name