From: markt Date: Thu, 2 Jul 2009 08:15:15 +0000 (+0000) Subject: Be consistent - use singular rather than plural X-Git-Url: https://git.internetallee.de/?a=commitdiff_plain;h=249945787e61bff38ab384eaf30ed9ab449da8e0;p=tomcat7.0 Be consistent - use singular rather than plural git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@790491 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/webapps/docs/config/filter.xml b/webapps/docs/config/filter.xml new file mode 100644 index 000000000..99a329a92 --- /dev/null +++ b/webapps/docs/config/filter.xml @@ -0,0 +1,90 @@ + + + +]> + + + &project; + + + Container Provided Filters + + + + + +
+ +

Tomcat provides a number of Filters which may be + configured for use with all web applications using + $CATALINA_BASE/conf/web.xml or may be configured for individual + web applications by configuring them in the application's + WEB-INF/web.xml. Each filter is described below.

+ +
+

This description uses the variable name $CATALINA_BASE to refer the + base directory against which most relative paths are resolved. If you have + not configured Tomcat for multiple instances by setting a CATALINA_BASE + directory, then $CATALINA_BASE will be set to the value of $CATALINA_HOME, + the directory into which you have installed Tomcat.

+
+ +
+ + +
+ + + +

The HTTP specification is clear that if no character set is specified for + media sub-types of the "text" media type, the ISO-8859-1 character set must + be used. However, browsers may attempt to auto-detect the character set. + This may be exploited by an attacker to perform an XSS attack. Internet + Explorer has this behaviour by default. Other browsers have an option to + enable it.

+ +

This filter prevents the attack by explicitly setting a character set. + Unless the provided character set is explicitly overridden by the user the + browser will adhere to the explicitly set character set, thus preventing the + XSS attack.

+ + + + + +

The filter class name for the Add Default Character Set Filter is + org.apache.catalina.filters.AddDefaultCharsetFilter + .

+ + + + + +

The Add Default Character Set Filter does not support any initialization + parameters

+ + + +
+ + + + + + diff --git a/webapps/docs/config/filters.xml b/webapps/docs/config/filters.xml deleted file mode 100644 index 99a329a92..000000000 --- a/webapps/docs/config/filters.xml +++ /dev/null @@ -1,90 +0,0 @@ - - - -]> - - - &project; - - - Container Provided Filters - - - - - -
- -

Tomcat provides a number of Filters which may be - configured for use with all web applications using - $CATALINA_BASE/conf/web.xml or may be configured for individual - web applications by configuring them in the application's - WEB-INF/web.xml. Each filter is described below.

- -
-

This description uses the variable name $CATALINA_BASE to refer the - base directory against which most relative paths are resolved. If you have - not configured Tomcat for multiple instances by setting a CATALINA_BASE - directory, then $CATALINA_BASE will be set to the value of $CATALINA_HOME, - the directory into which you have installed Tomcat.

-
- -
- - -
- - - -

The HTTP specification is clear that if no character set is specified for - media sub-types of the "text" media type, the ISO-8859-1 character set must - be used. However, browsers may attempt to auto-detect the character set. - This may be exploited by an attacker to perform an XSS attack. Internet - Explorer has this behaviour by default. Other browsers have an option to - enable it.

- -

This filter prevents the attack by explicitly setting a character set. - Unless the provided character set is explicitly overridden by the user the - browser will adhere to the explicitly set character set, thus preventing the - XSS attack.

- - - - - -

The filter class name for the Add Default Character Set Filter is - org.apache.catalina.filters.AddDefaultCharsetFilter - .

- - - - - -

The Add Default Character Set Filter does not support any initialization - parameters

- - - -
- - - - - - diff --git a/webapps/docs/config/project.xml b/webapps/docs/config/project.xml index da265cabf..4b4cff5a2 100644 --- a/webapps/docs/config/project.xml +++ b/webapps/docs/config/project.xml @@ -61,7 +61,7 @@ - +