Posted by Daniel Owens via Fulldisclosure on Nov 01
Description
The Apache Struts2 REST Plugin’s `DefaultContentTypeHandlerManager.getHandlerForResponse(HttpServletRequest,
HttpServletResponse)` splits the `Accept` header on commas and passes each resulting token directly to
`findHandler(String)` without trimming leading or trailing whitespace. `findHandler(String)` only retries a trimmed
lookup when a token contains a semicolon (`;`), so a token that merely carries a leading space has no…
Source: Full Disclosure (seclists.org) · 2026-11-02