Bug 63829

Summary: CompressionConfig does compare request header values for complete tokens case-insensitively
Product: Tomcat 9 Reporter: Michael Osipov <michaelo>
Component: ConnectorsAssignee: Tomcat Developers Mailing List <dev>
Status: RESOLVED FIXED    
Severity: major CC: michaelo
Priority: P2    
Version: 9.0.x   
Target Milestone: -----   
Hardware: All   
OS: All   

Description Michael Osipov 2019-10-10 09:25:11 UTC
Based on the discussion here: https://www.mail-archive.com/dev@tomcat.apache.org/msg136990.html

This is similar to 63825 and 63824. 
The class does neither compare case-insensitively as required by the appropriate RFC not does it compare complete tokens split at the comma.
Comment 1 Mark Thomas 2019-10-23 09:32:55 UTC
Fixed in:
- master for 9.0.28 onwards
- 8.5.x for 8.5.48 onwards
- 7.0.x for 7.0.98 onwards