-
Bug
-
Resolution: Done
-
Major
-
2.3.12.Final
-
None
When trying to use `Content-Encoding` support for request bodies, gzip works as expected but deflate does not, the request payload is unexpected.
Reproducing project: https://github.com/flozano/undertow-compression-issue/
Edit:
It seems the issue is that the RFC specifies zlib wrapping + deflate compression, but there are implementations that just send deflate compression without zlib wrapping.
Implementation in Undertow uses an Inflater with `nowrap=true`, and it seems to work only for payloads that are not wrapped with zlib (see reproducing project).
There is a suggestion in stackoverflow as to use the first few bytes to decide if wrapping was used or not.
- is incorporated by
-
WFCORE-7381 [CVE-2024-4109, CVE-2025-9784] Upgrade Undertow to 2.3.20.Final
-
- Resolved
-