The Vulnerability History Project

Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62343

      Make CORS filter defaults more secure.
This is the fix for CVE-2018-8014.

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1831726 13f79535-47bb-0310-9956-ffa450edef68

by Pauline the Wren 2018-05-16 14:53:21 UTC

commit d83a76732e6804739b81d8b2056365307637b42d

Tomcat Fix CVE-2018-8014

java/org/apache/catalina/filters/CorsFilter.java

+9 -10

java/org/apache/catalina/filters/LocalStrings.properties

-2

test/org/apache/catalina/filters/TestCorsFilter.java

+47 -15

test/org/apache/catalina/filters/TesterFilterConfigs.java

+5 -6

webapps/docs/changelog.xml

-4

expand_less