-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Swati,

On 7/27/2009 11:22 PM, Swati Rastogi -X (swrastog - Infosys at Cisco) wrote:
> I have removed all calls to getParameter family of methods on the
> request object and I can still see the issue. I have checked all
> servlet filters - No processing has been done on request object. This
> issue is seen when content-type=application/x-www-form-urlencoded.
> Issue is not seen when content-type=text/xml.

As Martin pointed out, using text/xml does not satisfy the requirements
of the servlet container to parse stdin into parameters.

> Two questions
> A) How to know from where getParameter is being called from the code?

Write a filter or valve, wrap the request and override the getParameter
family of methods to dump stack traces when they are called. Install
your filter as the /first/ filter in the call chain (by mapping it at
the top of the <filter-mapping> elements in web.xml). Especially if you
are using a web application framework, these calls can be made without
you realizing they are happening.

> B) Is it okay to use content-type=text/xml

It is definitely okay to use text/xml, though application/xml is often
used as well.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkpvMIwACgkQ9CaO5/Lv0PBiTwCeMubICUcOI8RkCzL9XvadR2Zg
NqwAnAxkVTZNL+iusf7wCbkmf/fTRWrG
=w/hX
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to