| Log Message: |
Make filtering of \r and \n in headers consistent for all connectors.
Make handling of 404s consistent across components.
Provide option to include custom status message in headers. SRV.5.3 suggests custom messages are intended for the body of the response, not the status line.
This is the security fix for CVE-2008-1232. |
tomcat/tc6.0.x/trunk/
tomcat/tc6.0.x/trunk/java/org/apache/catalina/core/StandardContextValve.java