example: <form method="POST" action="test.exe?test1"><input type="hidden" value="test2"><input type="submit"></form> this code does invoke the test.exe without passing the test1 command line parameter the example works in apache httpd and ms iis fix: CGIServlet.java if (!"GET".equals(req.getMethod()) && !"POST".equals(req.getMethod()) && !"HEAD".equals(req.getMethod())) return;
Created attachment 19164 [details] Patch to include POST query method when determining if the query string should be converted to CGI command line params Attached patch updates CGIServlet so that POSTs will be included when determining whether the query string should be converted to CGI command line arguments. It also cleans up the logic a bit. This behavior mirrors the behavior of the Apache httpd.
(In reply to comment #1) > Created an attachment (id=19164) [edit] > Patch to include POST query method when determining if the query string should > be converted to CGI command line params > > Attached patch updates CGIServlet so that POSTs will be included when > determining whether the query string should be converted to CGI command line > arguments. It also cleans up the logic a bit. This behavior mirrors the > behavior of the Apache httpd. Patch works fine, thank you!
Thanks for the patch. It has been applied to SVN and will be in 5.5.21 and 6.0.3 onwards.