Merged revision 1377887 from tomcat/trunk:
Remove unneeded handling of FORM authentication in RealmBase.
The login and error pages are handled via forward, so processing completes before this code is ever reached.
The action page is handled elsewhere.
It is a fix for CVE-2012-3546.
|