Author: jboynes Date: Fri Mar 20 03:35:36 2015 New Revision: 1667925 URL: http://svn.apache.org/r1667925 Log: Update site to announce Standard Taglib 1.2.5
Added: tomcat/site/trunk/docs/taglibs/CHANGES.txt Modified: tomcat/site/trunk/docs/download-taglibs.html tomcat/site/trunk/docs/index.html tomcat/site/trunk/docs/oldnews.html tomcat/site/trunk/docs/taglibs.html tomcat/site/trunk/xdocs/download-taglibs.xml tomcat/site/trunk/xdocs/index.xml tomcat/site/trunk/xdocs/oldnews.xml tomcat/site/trunk/xdocs/taglibs.xml Modified: tomcat/site/trunk/docs/download-taglibs.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-taglibs.html?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/docs/download-taglibs.html (original) +++ tomcat/site/trunk/docs/download-taglibs.html Fri Mar 20 03:35:36 2015 @@ -207,7 +207,7 @@ <div class="text"> <a href="https://www.apache.org/dist/tomcat/taglibs/KEYS">KEYS</a> | - <a href="#Standard-1.2.3">Standard Taglib 1.2.3</a> | + <a href="#Standard-1.2.5">Standard Taglib 1.2.5</a> | <a href="[preferred]tomcat/taglibs/" rel="nofollow">Browse</a> | <a href="http://archive.apache.org/dist/tomcat/taglibs/">Archives</a> @@ -255,7 +255,7 @@ </div> -<h3 id="Standard-1.2.3">Standard-1.2.3</h3> +<h3 id="Standard-1.2.5">Standard-1.2.5</h3> <div class="text"> @@ -267,15 +267,15 @@ <li> -<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/README_src.txt" rel="nofollow">Source README</a> +<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/README_src.txt" rel="nofollow">Source README</a> </li> <li> -<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-1.2.3-source-release.zip" rel="nofollow">zip</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-1.2.3-source-release.zip.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-1.2.3-source-release.zip.md5">md5</a>) +<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-1.2.5-source-release.zip" rel="nofollow">zip</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-1.2.5-source-release.zip.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-1.2.5-source-release.zip.md5">md5</a>) </li> </ul> @@ -292,7 +292,7 @@ <li> -<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/README_bin.txt" rel="nofollow">Binary README</a> +<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/README_bin.txt" rel="nofollow">Binary README</a> </li> @@ -301,9 +301,9 @@ <li> -<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-impl-1.2.3.jar" rel="nofollow">taglibs-standard-impl-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-impl-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-impl-1.2.3.jar.md5">md5</a>) +<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-impl-1.2.5.jar" rel="nofollow">taglibs-standard-impl-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-impl-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-impl-1.2.5.jar.md5">md5</a>) </li> </ul> @@ -315,9 +315,9 @@ <li> -<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-spec-1.2.3.jar" rel="nofollow">taglibs-standard-spec-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-spec-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-spec-1.2.3.jar.md5">md5</a>) +<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-spec-1.2.5.jar" rel="nofollow">taglibs-standard-spec-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-spec-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-spec-1.2.5.jar.md5">md5</a>) </li> </ul> @@ -329,9 +329,9 @@ <li> -<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-jstlel-1.2.3.jar" rel="nofollow">taglibs-standard-jstlel-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-jstlel-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-jstlel-1.2.3.jar.md5">md5</a>) +<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-jstlel-1.2.5.jar" rel="nofollow">taglibs-standard-jstlel-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-jstlel-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-jstlel-1.2.5.jar.md5">md5</a>) </li> </ul> @@ -343,9 +343,9 @@ <li> -<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-compat-1.2.3.jar" rel="nofollow">taglibs-standard-compat-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-compat-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-compat-1.2.3.jar.md5">md5</a>) +<a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-compat-1.2.5.jar" rel="nofollow">taglibs-standard-compat-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-compat-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-compat-1.2.5.jar.md5">md5</a>) </li> </ul> Modified: tomcat/site/trunk/docs/index.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/docs/index.html (original) +++ tomcat/site/trunk/docs/index.html Fri Mar 20 03:35:36 2015 @@ -227,22 +227,21 @@ project logo are trademarks of the Apach </div> -<h3 id="Apache_Standard_Taglib_1.2.3_Released"> -<span style="float: right;">2015-02-20</span> Apache Standard Taglib 1.2.3 Released</h3> +<h3 id="Apache_Standard_Taglib_1.2.5_Released"> +<span style="float: right;">2015-03-17</span> Apache Standard Taglib 1.2.5 Released</h3> <div class="text"> - <p> -The Apache Tomcat Project is proud to announce the release of version 1.2.3 of +The Apache Tomcat Project is proud to announce the release of version 1.2.5 of the Standard Taglib. This tag library provides Apache's implementation of the JSTL 1.2 specification. </p> <p> -Version 1.2.3 is a security and bug fix release. It fixes a few bugs found -in Standard Taglib 1.2.1 and provides protection against -<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254" rel="nofollow">CVE-2015-0254</a> -vulnerability (XXE and RCE via XSL extension in JSTL XML tags). +Version 1.2.5 is a minor bug fix release reverting a change made in 1.2.1 where +<c:import> modified the HTTP method during POST operations, and fixing an +issues that resulted in an AccessControlException during startup unless +permission was granted to read the accessExternalEntity property. </p> <p> @@ -252,7 +251,7 @@ Please see the <a href="taglibs.html">Ta <p style="text-align: center;"> <a href="download-taglibs.cgi">Download</a> | -<a href="http://svn.apache.org/repos/asf/tomcat/taglibs/standard/trunk/CHANGES.txt">Changes</a> +<a href="taglibs/CHANGES.txt">Changes</a> </p> Modified: tomcat/site/trunk/docs/oldnews.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/docs/oldnews.html (original) +++ tomcat/site/trunk/docs/oldnews.html Fri Mar 20 03:35:36 2015 @@ -225,6 +225,36 @@ </ul> </div> +<h3 id="Apache_Standard_Taglib_1.2.3_Released"> +<span style="float: right;">2015-02-20</span> Apache Standard Taglib 1.2.3 Released</h3> +<div class="text"> + + +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.3 of +the Standard Taglib. This tag library provides Apache's implementation +of the JSTL 1.2 specification. +</p> + +<p> +Version 1.2.3 is a security and bug fix release. It fixes a few bugs found +in Standard Taglib 1.2.1 and provides protection against +<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0254" rel="nofollow">CVE-2015-0254</a> +vulnerability (XXE and RCE via XSL extension in JSTL XML tags). +</p> + +<p> +Please see the <a href="taglibs.html">Taglibs section</a> for more details. +</p> + +<p style="text-align: center;"> + +<a href="download-taglibs.cgi">Download</a> | +<a href="http://svn.apache.org/repos/asf/tomcat/taglibs/standard/trunk/CHANGES.txt">Changes</a> + +</p> + +</div> <h3 id="Tomcat_8.0.18_Released"> <span style="float: right;">2015-01-26</span> Tomcat 8.0.18 Released</h3> <div class="text"> Modified: tomcat/site/trunk/docs/taglibs.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/taglibs.html?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/docs/taglibs.html (original) +++ tomcat/site/trunk/docs/taglibs.html Fri Mar 20 03:35:36 2015 @@ -216,7 +216,7 @@ <p>In addition, compatibility for applications using 1.0 expression language tags can be enabled in one of two ways: - </p> + </p> <ul> @@ -235,12 +235,12 @@ <p style="text-align: center;"> <a href="download-taglibs.cgi">Download</a> | - <a href="http://svn.apache.org/repos/asf/tomcat/taglibs/standard/trunk/CHANGES.txt">Changes</a> + <a href="taglibs/CHANGES.txt">Changes</a> </p> -<p>Please see the <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/README_bin.txt">README</a> +<p>Please see the <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/README_bin.txt">README</a> file for more detailed information on using the library.</p> Added: tomcat/site/trunk/docs/taglibs/CHANGES.txt URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/taglibs/CHANGES.txt?rev=1667925&view=auto ============================================================================== --- tomcat/site/trunk/docs/taglibs/CHANGES.txt (added) +++ tomcat/site/trunk/docs/taglibs/CHANGES.txt Fri Mar 20 03:35:36 2015 @@ -0,0 +1,89 @@ +Changes in 1.2.5 release +- Set version identifiers correctly, no other changes. + +Changes in 1.2.4 release (not released due to incorrect version numbers) + +57673 AccessControlException accessing org.apache.taglibs.standard.xml.accessExternalEntity +37466 Reverted changes that overrode HTTP method when importing local resources. + +Changes in 1.2.3 release + +57560 Check protocol when resolving on older JREs +57549 Fix reference to old SNAPSHOT version of taglibs-build-tools in pom files. +57548 Update library version number printed by Version class +57547 Fix regression with running on older JREs + +XML tags now enable FEATURE_SECURE_PROCESSING when parsing and transforming. The JSTL-specific +EntityResolver also checks the protocol being used against a white-list specified in the system +property org.apache.taglibs.standard.xml.accessExternalEntity in to order to limit access on +older JREs. + +Changes in 1.2.2 release [WITHDRAWN due to regressions in older JREs] + +57433 Double-check locking in ExpressionEvaluatorManager +57427 1.0 TLDs are missing from -compat jar +57289 XML factories should be located using the JSTL library's ClassLoader + +Changes in 1.2.1 release +- Documentation cleanup + +Major changes in 1.2.0 release +- Transitioned project from Apache Jakarta to Apache Tomcat +- Implementation of new functionality for JSTL 1.2; requires Java 1.5 +- Switched to Maven-based build +- Renamed JARs and modified packaging structure; OSGI metadata added +- XML processing performance improved by direct use of Xalan + +The following issues from Bugzilla (https://issues.apache.org/bugzilla) appear related. +However, due to the time since the last 1.1 release some issues may be missing or misclassified. + +55608 fmt:bundle tag unnecessarily buffers body content +54544 Loop vars are not reset for fortoken with deferred expression +52637 Broken link +50674 Some maven pom improvments +50462 xalan import should not be optional in maven-bundle-plugin +50461 out tag's escapeXml attribute should be set as true by default +50414 tlv package cause another split package issue in impl and jstlel bundles +50266 Javadoc and import corrections +50265 FormatDateSupport.dateFormatCache lazy init is not safe +50264 Missing @Override annotations +50263 README_src.txt out of date +50250 Split package issue in impl and jstlel bundles +50064 bundle-ify the taglibs jars +49900 BundleSupport.release() does not call super.release() to clear bodyContent +49578 XPath handling only supports single reference to variable +49565 Findbugs: Util.specialCharactersRepresentation should be both final and package protected +49561 Remove proprietary URLEncoder +49554 Clean up Functions +49548 Refactoring SetSupport +49547 Minor performance enhancement in set result evaluation +49546 Add test cases for SetSupport +49542 IteratedValueExpression and IndexedValueExpression implementation +49534 ForEachSupport handles unsupported items inconsistently +49526 c:set does not remove variables from ELContext VariableMapper +49510 Remove dependency on classes copied from commons +48848 fn:endsWith fails with repeated search string +48773 DataSourceWrapper and DriverManager problems +48772 Bad information in impl module pom.xml +46086 javax.servlet.jsp.jstl.sql.ResultSupport.java silently swallows SQLException +45197 Need to support the JSTL 1.2 specification +45183 Starting from mysql JDBC connector 5.1.6 a wrong behavior +43831 Unexpected Result with mysql jdbc 5.1.5, column aliases not reported +43640 Move the tests package to JUnit +43544 LRUCache implementation not updated to match latest collections code +43393 x:out provokes an IllegalStateException if session is forbidden +41343 Build fails on OS X. +41221 Fix source headers in source +39480 calling getContextClassLoader without doPriv +39195 getRequestLocale could throw exception on JBOSS +39284 fn:endsWith('abcda', 'a') returns false +37466 c:import doesn't work with HEAD requests +37029 TLD Validation error for HTML "param" element +35216 x:forEach causes session scope exception +34109 <c:url> doesn't merge slashes at the boundary of "context" and "value" +33934 [standard] memory leak in jstl c:set tag +32896 Invalid endsWith function +30068 Wrong behaviour of x:out inside x:forEach +27717 <x:forEach> very slow in JSTL 1.1 +17388 Result set created in query tag is never released + update tag +14465 position() and last() are critical \ No newline at end of file Modified: tomcat/site/trunk/xdocs/download-taglibs.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/download-taglibs.xml?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/download-taglibs.xml (original) +++ tomcat/site/trunk/xdocs/download-taglibs.xml Fri Mar 20 03:35:36 2015 @@ -15,7 +15,7 @@ <!-- Begin quick navigation section --> <section name="Quick Navigation"> <a href="https://www.apache.org/dist/tomcat/taglibs/KEYS">KEYS</a> | - <a href="#Standard-1.2.3">Standard Taglib 1.2.3</a> | + <a href="#Standard-1.2.5">Standard Taglib 1.2.5</a> | <a href="[preferred]tomcat/taglibs/" rel="nofollow">Browse</a> | <a href="http://archive.apache.org/dist/tomcat/taglibs/">Archives</a> </section> @@ -60,17 +60,17 @@ <!-- End mirrors section --> <!-- Begin standard section --> - <section name="Standard-1.2.3"> + <section name="Standard-1.2.5"> <subsection name="Source Code Distributions"> <ul> <li> - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/README_src.txt" rel="nofollow">Source README</a> + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/README_src.txt" rel="nofollow">Source README</a> </li> <li> - <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-1.2.3-source-release.zip" rel="nofollow">zip</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-1.2.3-source-release.zip.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-1.2.3-source-release.zip.md5">md5</a>) + <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-1.2.5-source-release.zip" rel="nofollow">zip</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-1.2.5-source-release.zip.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-1.2.5-source-release.zip.md5">md5</a>) </li> </ul> </subsection> @@ -78,41 +78,41 @@ <subsection name="Jar Files"> <ul> <li> - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/README_bin.txt" rel="nofollow">Binary README</a> + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/README_bin.txt" rel="nofollow">Binary README</a> </li> <li>Impl: <ul> <li> - <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-impl-1.2.3.jar" rel="nofollow">taglibs-standard-impl-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-impl-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-impl-1.2.3.jar.md5">md5</a>) + <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-impl-1.2.5.jar" rel="nofollow">taglibs-standard-impl-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-impl-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-impl-1.2.5.jar.md5">md5</a>) </li> </ul> </li> <li>Spec: <ul> <li> - <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-spec-1.2.3.jar" rel="nofollow">taglibs-standard-spec-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-spec-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-spec-1.2.3.jar.md5">md5</a>) + <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-spec-1.2.5.jar" rel="nofollow">taglibs-standard-spec-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-spec-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-spec-1.2.5.jar.md5">md5</a>) </li> </ul> </li> <li>EL: <ul> <li> - <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-jstlel-1.2.3.jar" rel="nofollow">taglibs-standard-jstlel-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-jstlel-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-jstlel-1.2.3.jar.md5">md5</a>) + <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-jstlel-1.2.5.jar" rel="nofollow">taglibs-standard-jstlel-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-jstlel-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-jstlel-1.2.5.jar.md5">md5</a>) </li> </ul> </li> <li>Compat: <ul> <li> - <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-compat-1.2.3.jar" rel="nofollow">taglibs-standard-compat-1.2.3.jar</a> - (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-compat-1.2.3.jar.asc">pgp</a>, - <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/taglibs-standard-compat-1.2.3.jar.md5">md5</a>) + <a href="[preferred]tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-compat-1.2.5.jar" rel="nofollow">taglibs-standard-compat-1.2.5.jar</a> + (<a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-compat-1.2.5.jar.asc">pgp</a>, + <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/taglibs-standard-compat-1.2.5.jar.md5">md5</a>) </li> </ul> </li> Modified: tomcat/site/trunk/xdocs/index.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/index.xml?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/index.xml (original) +++ tomcat/site/trunk/xdocs/index.xml Fri Mar 20 03:35:36 2015 @@ -37,30 +37,24 @@ project logo are trademarks of the Apach </section> -<section name="Apache Standard Taglib 1.2.3 Released" rtext="2015-02-20"> -<!-- - FIXME: - 2. Changelog link goes to SVN repository. - Is the CHANGES file published on the site? - Maybe upload it to the download area? ---> +<section name="Apache Standard Taglib 1.2.5 Released" rtext="2015-03-17"> <p> -The Apache Tomcat Project is proud to announce the release of version 1.2.3 of +The Apache Tomcat Project is proud to announce the release of version 1.2.5 of the Standard Taglib. This tag library provides Apache's implementation of the JSTL 1.2 specification. </p> <p> -Version 1.2.3 is a security and bug fix release. It fixes a few bugs found -in Standard Taglib 1.2.1 and provides protection against -<cve>CVE-2015-0254</cve> -vulnerability (XXE and RCE via XSL extension in JSTL XML tags). +Version 1.2.5 is a minor bug fix release reverting a change made in 1.2.1 where +<c:import> modified the HTTP method during POST operations, and fixing an +issues that resulted in an AccessControlException during startup unless +permission was granted to read the accessExternalEntity property. </p> <p> Please see the <a href="taglibs.html">Taglibs section</a> for more details. </p> <p style="text-align: center;"> <a href="download-taglibs.cgi">Download</a> | -<a href="http://svn.apache.org/repos/asf/tomcat/taglibs/standard/trunk/CHANGES.txt">Changes</a> +<a href="taglibs/CHANGES.txt">Changes</a> </p> </section> Modified: tomcat/site/trunk/xdocs/oldnews.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews.xml?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews.xml (original) +++ tomcat/site/trunk/xdocs/oldnews.xml Fri Mar 20 03:35:36 2015 @@ -19,6 +19,33 @@ </ul> </section> +<section name="Apache Standard Taglib 1.2.3 Released" rtext="2015-02-20"> +<!-- + FIXME: + 2. Changelog link goes to SVN repository. + Is the CHANGES file published on the site? + Maybe upload it to the download area? +--> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.3 of +the Standard Taglib. This tag library provides Apache's implementation +of the JSTL 1.2 specification. +</p> +<p> +Version 1.2.3 is a security and bug fix release. It fixes a few bugs found +in Standard Taglib 1.2.1 and provides protection against +<cve>CVE-2015-0254</cve> +vulnerability (XXE and RCE via XSL extension in JSTL XML tags). +</p> +<p> +Please see the <a href="taglibs.html">Taglibs section</a> for more details. +</p> +<p style="text-align: center;"> +<a href="download-taglibs.cgi">Download</a> | +<a href="http://svn.apache.org/repos/asf/tomcat/taglibs/standard/trunk/CHANGES.txt">Changes</a> +</p> +</section> + <section name="Tomcat 8.0.18 Released" rtext="2015-01-26"> <p> The Apache Tomcat Project is proud to announce the release of version 8.0.18 Modified: tomcat/site/trunk/xdocs/taglibs.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/taglibs.xml?rev=1667925&r1=1667924&r2=1667925&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/taglibs.xml (original) +++ tomcat/site/trunk/xdocs/taglibs.xml Fri Mar 20 03:35:36 2015 @@ -37,10 +37,10 @@ <p style="text-align: center;"> <a href="download-taglibs.cgi">Download</a> | - <a href="http://svn.apache.org/repos/asf/tomcat/taglibs/standard/trunk/CHANGES.txt">Changes</a> + <a href="taglibs/CHANGES.txt">Changes</a> </p> - <p>Please see the <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.3/README_bin.txt">README</a> + <p>Please see the <a href="https://www.apache.org/dist/tomcat/taglibs/taglibs-standard-1.2.5/README_bin.txt">README</a> file for more detailed information on using the library.</p> <p>For performance reasons the XML tags use Apache Xalan directly for evaluating XPath --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org