View | Details | Raw Unified | Return to bug 61489
Collapse All | Expand All

(-)java/org/apache/catalina/servlets/CGIServlet.java (-1 / +10 lines)
Lines 282-287 Link Here
282
    /** the shell environment variables to be passed to the CGI script */
282
    /** the shell environment variables to be passed to the CGI script */
283
    private final Hashtable<String,String> shellEnv = new Hashtable<>();
283
    private final Hashtable<String,String> shellEnv = new Hashtable<>();
284
284
285
    /** enable creation of script command line arguments from query-string. 
286
     * See https://tools.ietf.org/html/rfc3875#section-4.4
287
     * 4.4.  The Script Command Line
288
     */
289
    private boolean enableCmdLineArguments = false;
290
    
285
    /**
291
    /**
286
     * Sets instance variables.
292
     * Sets instance variables.
287
     * <P>
293
     * <P>
Lines 341-346 Link Here
341
            envHttpHeadersPattern =
347
            envHttpHeadersPattern =
342
                    Pattern.compile(getServletConfig().getInitParameter("envHttpHeaders"));
348
                    Pattern.compile(getServletConfig().getInitParameter("envHttpHeaders"));
343
        }
349
        }
350
        
351
        enableCmdLineArguments =
352
        		    Boolean.parseBoolean(config.getInitParameter("enableCmdLineArguments"));
344
    }
353
    }
345
354
346
355
Lines 680-686 Link Here
680
                } else {
689
                } else {
681
                    qs = req.getQueryString();
690
                    qs = req.getQueryString();
682
                }
691
                }
683
                if (qs != null && qs.indexOf('=') == -1) {
692
                if (enableCmdLineArguments && qs != null && qs.indexOf('=') == -1) {
684
                    StringTokenizer qsTokens = new StringTokenizer(qs, "+");
693
                    StringTokenizer qsTokens = new StringTokenizer(qs, "+");
685
                    while ( qsTokens.hasMoreTokens() ) {
694
                    while ( qsTokens.hasMoreTokens() ) {
686
                        cmdLineParameters.add(URLDecoder.decode(qsTokens.nextToken(),
695
                        cmdLineParameters.add(URLDecoder.decode(qsTokens.nextToken(),

Return to bug 61489