The Apache Tomcat team announces the immediate availability of Apache
Tomcat 9.0.34.
Apache Tomcat 9 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.
Apache Tomcat 9.0.34 is a bugfix and feature release. The notable
changes compared to 9.0.33 include:
- Add support for default values when using ${...} property replacement
in configuration files. Based on a pull request provided by Bernd
Bohmann.
- When configuring an HTTP Connector, warn if the encoding specified for
URIEncoding is not a superset of US-ASCII as required by RFC7230.
- Replace the system property
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the
Connector attribute encodedSolidusHandling that adds an additional
option to pass the %2f sequence through to the application without
decoding it in addition to rejecting such sequences and decoding such
sequences.
Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
Downloads:
http://tomcat.apache.org/download-90.cgi
Migration guides from Apache Tomcat 7.x and 8.x:
http://tomcat.apache.org/migration.html
Enjoy!
- The Apache Tomcat team