- 发布日期2020-05-16
- 感知时间2020-05-16
- 漏洞类型普通更新
- 风险等级未知
- 更新版本7.0.104
- 情报贡献TSRC
Tomcat 7.0.104 Released
<br/> - Add support for default values when using ${...} property<br/> replacement in configuration files. Based on a pull request provided by<br/> Bernd Bohmann.<br/> - When configuring an HTTP Connector, warn if the encoding specified for<br/> URIEncoding is not a superset of US-ASCII as required by RFC<br/> 7230.<br/> - Replace the system property<br/> org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with<br/> the Connector attribute encodedSolidusHandling that adds an<br/> additional option to pass the %2f sequence through to the<br/> application without decoding it in addition to rejecting such sequences and<br/> decoding such sequences.<br/> - Change default value separator for property replacement to ":-"<br/> due to possible conflicts. The syntax is now "${name:-default}".<br/> - Update the packaged version of the Tomcat Native Library to 1.2.24.
Apache Tomcat是一款开放源码的JSP应用服务器程序
暂无
暂无
暂无
http://tomcat.apache.org/