projects / tomcat7.0 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 73310b6) | patch
Fix CVE-2010-1157.
authormarkt <markt@13f79535-47bb-0310-9956-ffa450edef68>
Wed, 21 Apr 2010 22:11:29 +0000 (22:11 +0000)
committermarkt <markt@13f79535-47bb-0310-9956-ffa450edef68>
Wed, 21 Apr 2010 22:11:29 +0000 (22:11 +0000)
commit043e223837174d2e33d3e8f3bbb667ab158b2b5c
treef26804fd959ea7b4b1ccb9851089aa6b17408aa6tree | snapshot
parent73310b6bc4a32c0a9b36a2ebb3b136709b52a61dcommit | diff
Fix CVE-2010-1157.
Prevent possible disclosure of host name or IP address via the HTTP WWW-Authenticate header when using BASIC or DIGEST authentication.

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@936539 13f79535-47bb-0310-9956-ffa450edef68
java/org/apache/catalina/authenticator/AuthenticatorBase.java diff | blob | history
java/org/apache/catalina/authenticator/BasicAuthenticator.java diff | blob | history
java/org/apache/catalina/authenticator/DigestAuthenticator.java diff | blob | history
webapps/docs/realm-howto.xml diff | blob | history
Unnamed repository; edit this file to name it for gitweb.