-
Bug
-
Resolution: Done
-
Critical
-
None
-
JWS 3.1.0 CR4
-
None
We need to backport the following to limit customer issues from the CVE-2016-6816 fix:
https://bz.apache.org/bugzilla/show_bug.cgi?id=60594
tomcat7
http://svn.apache.org/r1782043
http://svn.apache.org/r1782246
- clones
-
JWS-717 RFC 7230/3986 url requirement that prevents unencoded curly braces should be optional, since it breaks existing sites
- Closed
- is cloned by
-
JWS-1001 [GSS][tomcat9] RFC 7230/3986 url requirement that prevents unencoded curly braces should be optional, since it breaks existing sites
- Closed