Author: markt
Date: Wed Mar 3 18:26:38 2010
New Revision: 918615
URL: http://svn.apache.org/viewvc?rev=918615&view=rev
Log:
Add constraint for findleaks manager command
Modified:
tomcat/tc6.0.x/trunk/STATUS.txt
tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml
tomcat/tc6.0.x/trunk/webapps/manager/WEB-INF/web.xml
Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=918615&r1=918614&r2=918615&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Wed Mar 3 18:26:38 2010
@@ -114,11 +114,6 @@
+1: markt
-1:
-* Add constraint for findleaks manager command
- http://people.apache.org/~kkolinko/patches/2010-02-28_tc6_findLeaks.patch
- +1: kkolinko, mturk, markt, jfclere,funkman
- -1:
-
* Move sessionDetail.jsp sessionsList.jsp of Manager webapp into WEB-INF
That is rev.917598
1)
Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml?rev=918615&r1=918614&r2=918615&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Wed Mar 3 18:26:38 2010
@@ -39,6 +39,14 @@
Catalina, Coyote, Jasper, Cluster, Webapps, Other
-->
<section name="Tomcat 6.0.26 (jfclere)">
+ <subsection name="Catalina">
+ <changelog>
+ <fix>
+ Close security hole in unreleased 6.0.25 by ensuring new find leaks
+ functionality is protected by a security constraint. (kkolinko)
+ </fix>
+ </changelog>
+ </subsection>
<subsection name="Coyote">
<changelog>
<fix>
Modified: tomcat/tc6.0.x/trunk/webapps/manager/WEB-INF/web.xml
URL:
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/manager/WEB-INF/web.xml?rev=918615&r1=918614&r2=918615&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/webapps/manager/WEB-INF/web.xml (original)
+++ tomcat/tc6.0.x/trunk/webapps/manager/WEB-INF/web.xml Wed Mar 3 18:26:38
2010
@@ -172,6 +172,7 @@
<url-pattern>/status/*</url-pattern>
<url-pattern>/roles</url-pattern>
<url-pattern>/resources</url-pattern>
+ <url-pattern>/findleaks</url-pattern>
</web-resource-collection>
<auth-constraint>
<!-- NOTE: This role is not present in the default users file -->
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
