dhis2-users team mailing list archive

[Pamod Amarakoon <pamodm@xxxxxxxxx>]

Thanx for fixing this Lars.

On Sat, Jan 7, 2017 at 6:26 PM, Lars Helge Øverland <lars@xxxxxxxxx> wrote:

> Hi all,
>
> the latest builds of tomcat (the servlet container mostly used with DHIS
> 2) has tightened up validation of characters in URLs, so that only
> characters defined as safe per RFC 1738
> <https://www.ietf.org/rfc/rfc1738.txt> are allowed. Our apps had some
> cases of un-escaped use of the pipe character which was causing tomcat to
> occasionally return 400 bad request.
>
> We have patched this now in 2.24, 2.25 and master.
>
> Bottom line: If you plan to upgrade to very latest Tomcat 7, 8 or 8.5
> builds on your server, make sure to upgrade to latest 2.24 or 2.25 of DHIS
> 2.
>
>
> regards,
>
> Lars
>
>
>
>
>
>
> --
> Lars Helge Øverland
> Lead developer, DHIS 2
> University of Oslo
> Skype: larshelgeoverland
> lars@xxxxxxxxx
> http://www.dhis2.org <https://www.dhis2.org/>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-users
> Post to     : dhis2-users@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-users
> More help   : https://help.launchpad.net/ListHelp
>
>


-- 
Regards,
Dr. Pamod Amarakoon
MBBS (SL)
MSc (Biomedical Informatics), EMSc (Health Admin)
Medical Officer in Health Informatics
Nutrition Coordination Division
Ministry of Health, Nutrition and Indigenous Medicine,
Sri Lanka

Confidentiality Notice: the information contained in this email and any
attachments may be legally privileged and confidential. If you are not an
intended recipient, you are hereby notified that any dissemination,
distribution, or copying of this e-mail is strictly prohibited. If you have
received this e-mail in error, please notify the sender and permanently
delete the e-mail and any attachments immediately. You should not retain,
copy or use this e-mail or any attachments for any purpose, nor disclose
all or any part of the contents to any other person.