The Vulnerability History Project

Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62343

      Make CORS filter defaults more secure.
This is the fix for CVE-2018-8014.

git-svn-id: https://svn.apache.org/repos/asf/tomcat/tc8.5.x/trunk@1831728 13f79535-47bb-0310-9956-ffa450edef68

by Pauline the Wren 2018-05-16 14:54:09 UTC

commit 60f596a21fd6041335a3a1a4015d4512439cecb5

Tomcat Fix CVE-2018-8014

java/org/apache/catalina/filters/CorsFilter.java

+9 -10

java/org/apache/catalina/filters/LocalStrings.properties

-2

test/org/apache/catalina/filters/TestCorsFilter.java

+47 -15

test/org/apache/catalina/filters/TesterFilterConfigs.java

+5 -6

webapps/docs/changelog.xml

-4

expand_less