From: <glassfish_at_javadesktop.org>
Date: Mon, 06 Sep 2010 10:28:33 PDT

I have posted a feature request at https://glassfish.dev.java.net/issues/show_bug.cgi?id=13296

I hope the Glassfish guys will take care of this here! Maintaining optional http header fields manually is very important - you may want to chack this here: http://www.wiik.de/blog/2008/01/12/glassfish-security-vulnerability/
[Message sent by forum member 'nabizamani']

http://forums.java.net/jive/thread.jspa?messageID=481993