SONAR-11680 upgrade Tomcat to 8.5.38

diff --git a/build.gradle b/build.gradle
index b627b5cdc845752e292fc2790e071cbc6e6c196b..c3cbf44bbd808cb046d17e9a6cec4a5fc2580883 100644 (file)
--- a/build.gradle
+++ b/build.gradle
@@ -164,7 +164,7 @@ subprojects {
         entry 'log4j-to-slf4j'
         entry 'log4j-core'
       }
-      dependencySet(group: 'org.apache.tomcat.embed', version: '8.5.37') {
+      dependencySet(group: 'org.apache.tomcat.embed', version: '8.5.38') {
         entry 'tomcat-embed-core'
         entry('tomcat-embed-jasper') {
           exclude 'org.eclipse.jdt.core.compiler:ecj'

diff --git a/server/sonar-server/src/main/java/org/sonar/server/app/TomcatConnectors.java b/server/sonar-server/src/main/java/org/sonar/server/app/TomcatConnectors.java
index a768e41a1082ecfa4e6bb9a973bf4387e9172e8b..e63c28cd3127cdb316e74485911aeefde0dcd261 100644 (file)
--- a/server/sonar-server/src/main/java/org/sonar/server/app/TomcatConnectors.java
+++ b/server/sonar-server/src/main/java/org/sonar/server/app/TomcatConnectors.java
@@ -55,6 +55,8 @@ class TomcatConnectors {
     connector.setURIEncoding("UTF-8");
     connector.setProperty("address", props.value("sonar.web.host", "0.0.0.0"));
     connector.setProperty("socket.soReuseAddress", "true");
+    // see https://tomcat.apache.org/tomcat-8.5-doc/config/http.html
+    connector.setProperty("relaxedQueryChars", "\"<>[\\]^`{|}");
     configurePool(props, connector);
     configureCompression(connector);
     configureMaxHttpHeaderSize(connector);