Details
-
Bug
-
Resolution: Won't Do
-
Major
-
None
-
JWS 5.0_RHEL ER1
-
None
Description
We need to backport the following to limit customer issues from the CVE-2016-6816 fix:
https://bz.apache.org/bugzilla/show_bug.cgi?id=60594
tomcat7
http://svn.apache.org/r1782043
http://svn.apache.org/r1782246
Attachments
Issue Links
- clones
-
JWS-720 [GSS](3.1.0 one-off) RFC 7230/3986 url requirement that prevents unencoded curly braces should be optional, since it breaks existing sites
- Closed