Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Monitoring audit omits the body content on POST Form URL encoded requests #307

Open
fernandor777 opened this issue Aug 4, 2021 · 0 comments
Assignees
Labels

Comments

@fernandor777
Copy link

On audit requests, when the request is a POST with Form URL encoded parameters, the logged body by audit is empty.

Regarding why the body content is not present on Form URL encoded requests, looks like its a servlet spec limitation:
https://stackoverflow.com/a/8522613
https://github.com/vy/hrrs#caveats

In section SRV.3.1.1 of Servlet spec, it has been stated that any access to request parameters (e.g. HttpServletRequest#getParameterMap()) can trigger the early consumption of the request InputStream before it reaches to the handler. 
@fernandor777 fernandor777 self-assigned this Aug 4, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant