Re: [undertow-dev] Equivalents to Tomcat/JBossWeb valves and options

> The most commonly used Tomcat -D option is > org.apache.catalina.STRICT_SERVLET_COMPLIANCE=false. When it's > discussed, it always seems to be added for the effect of not enforcing > "any wrapped request or response object passed to an application > dispatcher will be checked to ensure that it has wrapped the original > request or response. (SRV.8.2 / SRV.14.2.5.1)". Undertow enforces that > clause. I will add this option. I think this should be modifiable per deployment, as well as per server. For a lot of these options I am thinking we have a servlet settings option in the config, which can then be overridden in jboss-web.xml. I don't really want to have things setup via system properties.

At the moment this limit is hard coded, but that should be fixed up soon. This can only be modified on a global level, as this happens before it is dispatched to a servlet application. We also use SecureHashMap in some places, which will throw an exception if there are two many hash collisions. Looks like cookie handler is vulnerable at the moment, I will fix that up tomorrow.

Undertow does not re-size buffers, it uses fixed size direct buffers for the most part. We are still using Jasper for JSP though, so I will look into this option.