angler-fishThe Vulnerability History Project

Add additional configuration options to the DIGEST authenticator

      This is the fix for CVE-2011-1184

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1087655 13f79535-47bb-0310-9956-ffa450edef68
by Pauline the Wren 2011-04-01 11:36:54 UTC
commit 639e20992a66d7a42fb59c974db91c8a0f730a1e
Tomcat Fix CVE-2011-1184
java/org/apache/catalina/authenticator/DigestAuthenticator.java
+109 -390
java/org/apache/catalina/authenticator/LocalStrings.properties
-2
java/org/apache/catalina/authenticator/mbeans-descriptors.xml
-20
java/org/apache/catalina/realm/RealmBase.java
+2 -7
test/org/apache/catalina/authenticator/TestDigestAuthenticator.java
-349
test/org/apache/catalina/authenticator/TesterDigestAuthenticatorPerformance.java
-262
webapps/docs/changelog.xml
-4
webapps/docs/config/valve.xml
-34
expand_less