[java-sig-commits] [Bug 1548291] CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources [epel-all]