Most GET requests don't include a Content-Length header, and they work fine.

"Mary Joseph" <[EMAIL PROTECTED]> wrote in message 
news:[EMAIL PROTECTED]
Hi,

I am facing a problem with tomcat not working as stand-alone .

It is using CoyoteConnector on 8080 port and rejecting my request as 400 Bad 
Request.

I am using tomcat 4.1.36 and got to know the issue  CVE-2005-2090 which got 
fixed according to which all requests with multiple content lengths are 
treated as invalid.

I checked my request headers and found that the content length header is 
missing.

I wanted to know if a request can be rejected as 400 if the content length 
header is not present also?

Any idea how to enable logs?

I already tried out the debug tags in server.xml but nothing is coming up in 
the logs.

Thanks in advance,

Mary




---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to