From 92f665be2c038e4510c4da091bef5bd85738629b Mon Sep 17 00:00:00 2001 From: Vincent Massol <vincent@massol.net> Date: Tue, 21 Nov 2017 09:42:26 +0100 Subject: [PATCH] XDOCKER-38: Configure Tomcat to allow encoded slash '%2F' and backslash '%5C' in URLs * Added explanations --- template/tomcat/setenv.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/template/tomcat/setenv.sh b/template/tomcat/setenv.sh index 12f1781..a28adfb 100755 --- a/template/tomcat/setenv.sh +++ b/template/tomcat/setenv.sh @@ -1 +1,3 @@ +# By default, Tomcat does not allow the usage of encoded slash '%2F' and backslash '%5C' in URLs, as noted in http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.10. +# This is why we're passing 2 system properties to allow for them as it's useful to be able to have '/' and '\' in wiki pahe names. export CATALINA_OPTS="-Xmx1024m -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true -Dorg.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH=true" -- GitLab