The Transfer-Encoding header is processed manually (https://github.com/apache/tomcat/blob/master/java/org/apache/coyote/http11/Http11Processor.java#L760-L775), use the newly introduced TokenList parser to reduce duplicate code
The spots in question are: * https://github.com/apache/tomcat/blob/master/java/org/apache/coyote/http11/Http11Processor.java#L722-L739 * https://github.com/apache/tomcat/blob/8.5.x/java/org/apache/coyote/http11/Http11Processor.java#L1112-L1129
Fixed in: - master for 9.0.28 onwards - 8.5.x for 8.5.48 onwards - 7.0.x for 7.0.98 onwards