Pradeep, On 9/13/21 09:35, Pradeep wrote:
I am using Tomcat 7.0.57, I can't change the Tomcat version now.
Running my previous "forge" file (with GET http://www.microsoft.com/, the the forged Host header) against Tomcat 7.0.57:
$ nc localhost 8080 < forge HTTP/1.1 200 OK Server: Apache-Coyote/1.1 Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Date: Mon, 13 Sep 2021 13:46:25 GMT 2000 <!DOCTYPE html> [remainder of the "welcome" document from ROOT] context. Changing the request line to "GET www.microsoft.com/ HTTP/1.1": $ nc localhost 8080 < forge HTTP/1.1 400 Bad Request Server: Apache-Coyote/1.1 Content-Length: 0 Date: Mon, 13 Sep 2021 13:49:01 GMT Connection: close Changing the request line to "GET / HTTP/1.1": $ nc localhost 8080 < forge HTTP/1.1 200 OK Server: Apache-Coyote/1.1 Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Date: Mon, 13 Sep 2021 13:49:27 GMT 2000 <!DOCTYPE html> [welcome page, again] I cannot reproduce your circumstances. Please provide steps-to-reproduce. -chris --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
