Christopher Swingler wrote: > Hi there list. > > We're experiencing an odd issue when a URL contains an escaped sequence, in > particular, the escaped sequence for forward slash (%2F). We have a servlet > defined in httpd.conf as such:
Take a look at: - http://tomcat.apache.org/security-5.html CVE-2007-0450 - http://tomcat.apache.org/security-jk.html CVE-2007-1860 It should be a case of 'just' using the latest versions and setting the right combination of options. Mark --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]