DO NOT REPLY [Bug 44506] Adding JvmOptions prevents Tomcat from starting
https://issues.apache.org/bugzilla/show_bug.cgi?id=44506 --- Comment #3 from David Newcomb <[EMAIL PROTECTED]> 2008-03-31 03:08:01 PST --- Reported at suggested place: https://issues.apache.org/jira/browse/DAEMON-109 -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r642962 - /tomcat/tc6.0.x/trunk/STATUS.txt
Author: remm Date: Mon Mar 31 04:03:24 2008 New Revision: 642962 URL: http://svn.apache.org/viewvc?rev=642962&view=rev Log: - Votes. Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=642962&r1=642961&r2=642962&view=diff == --- tomcat/tc6.0.x/trunk/STATUS.txt (original) +++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Mar 31 04:03:24 2008 @@ -63,7 +63,7 @@ * Get o.a.c.valves.CometConnectionManagerValve working Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=44646 http://svn.apache.org/viewvc?rev=640273&view=rev - +1: markt + +1: markt, remm -1: * Provide more helpful error message when class can't load due to wrong version @@ -87,7 +87,7 @@ https://issues.apache.org/bugzilla/show_bug.cgi?id=44611 Patch provided by Chris Hubick http://svn.apache.org/viewvc?rev=640584&view=rev - +1: markt + +1: markt, remm (I wonder where these methods are used) -1: * Document packetSize attribute for AJP connector @@ -99,21 +99,21 @@ * Fix ServletInputStream still readable when closed https://issues.apache.org/bugzilla/show_bug.cgi?id=44673 http://svn.apache.org/viewvc?rev=641076&view=rev - +1: markt + +1: markt, remm -1: * Fix CGI and env on vista (and prob, other OS's) http://svn.apache.org/viewvc?rev=642391&view=rev - +1: markt + +1: markt, remm -1: * No roles (deny all) trumps no auth-constraint (allow all) https://issues.apache.org/bugzilla/show_bug.cgi?id=44529 - +1: markt + +1: markt, remm -1: * Fix reading of multi-byte request data https://issues.apache.org/bugzilla/show_bug.cgi?id=44494 This is Remy's patch from comment #23 less the one bad line (comment #28) - +1: markt + +1: markt, remm -1: - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44637] JspValueExpression.getType() returns Object. class instead of correct Type
https://issues.apache.org/bugzilla/show_bug.cgi?id=44637 Michael Heß <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEEDINFO|ASSIGNED --- Comment #2 from Michael Heß <[EMAIL PROTECTED]> 2008-03-31 04:14:15 PST --- Sorry for the delay, I was on vacation last week. I'll attach the war as requested. Let me know if you need further infos or having further problems recreating the behaviour. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44637] JspValueExpression.getType() returns Object. class instead of correct Type
https://issues.apache.org/bugzilla/show_bug.cgi?id=44637 --- Comment #3 from Michael Heß <[EMAIL PROTECTED]> 2008-03-31 04:17:56 PST --- Created an attachment (id=21740) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=21740) WAR File with blank JARs I left the JARs as 0-byte files in WEB-INF/lib. Just replace them with the corresponding files. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44712] New: Grammar error in Tomcat exception
https://issues.apache.org/bugzilla/show_bug.cgi?id=44712 Summary: Grammar error in Tomcat exception Product: Tomcat 6 Version: 6.0.16 Platform: PC OS/Version: Windows XP Status: NEW Keywords: ErrorMessage Severity: normal Priority: P2 Component: Servlet & JSP API AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] org.apache.jasper.JasperException: /product.jsp(26,4) The function cointans must be used with a prefix when a default namespace is not specified Not cointans, but contains. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44712] Grammar error in Tomcat exception
https://issues.apache.org/bugzilla/show_bug.cgi?id=44712 Denis <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED Resolution||INVALID --- Comment #1 from Denis <[EMAIL PROTECTED]> 2008-03-31 04:48:28 PST --- sorry, it is my mistake -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44679] Cookies are treated differently between 6.0. 16 and 6.0.14
https://issues.apache.org/bugzilla/show_bug.cgi?id=44679 --- Comment #7 from Filip Hanik <[EMAIL PROTECTED]> 2008-03-31 07:28:42 PST --- servlet spec says public void setValue(String newValue) Assigns a new value to a cookie after the cookie is created. If you use a binary value, you may want to use BASE64 encoding. With Version 0 cookies, values should not contain white space, brackets, parentheses, equals signs, commas, double quotes, slashes, question marks, at signs, colons, and semicolons. Empty values may not behave the same way on all browsers. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44382] Need to add support for HTTPOnly session cookie parameter
https://issues.apache.org/bugzilla/show_bug.cgi?id=44382 Jim Manico <[EMAIL PROTECTED]> changed: What|Removed |Added AssignedTo|[EMAIL PROTECTED] |tomcat- ||[EMAIL PROTECTED] -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44382] Need to add support for HTTPOnly session cookie parameter
https://issues.apache.org/bugzilla/show_bug.cgi?id=44382 Jim Manico <[EMAIL PROTECTED]> changed: What|Removed |Added URL|http://www.petefreitag.com/i|http://msdn2.microsoft.com/e |tem/644.cfm |n-us/library/ms533046.aspx -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
HttpOnly and Kauai
Gentlemen, As a blatant bribery attempt - I live and work on the island of Kauai in Hawaii. Whomever commits this *https://issues.apache.org/bugzilla/show_bug.cgi?id=44382* Will win a free stay in my guest house. :) Food included. Zip code 96703, <5 minutes from the beach. =D -- Jim Manico Senior Application Security Engineer Aspect Security
DO NOT REPLY [Bug 44382] Need to add support for HTTPOnly session cookie parameter
https://issues.apache.org/bugzilla/show_bug.cgi?id=44382 --- Comment #5 from Jim Manico <[EMAIL PROTECTED]> 2008-03-31 12:44:09 PST --- Created an attachment (id=21741) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=21741) Patch for HttpOnly support in javax.servlet.http.Cookie -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44715] New: Missing attribute in the AJP Connector (jk) configuration Doc.
https://issues.apache.org/bugzilla/show_bug.cgi?id=44715 Summary: Missing attribute in the AJP Connector (jk) configuration Doc. Product: Tomcat 6 Version: unspecified Platform: PC OS/Version: All Status: NEW Severity: normal Priority: P2 Component: Connectors AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] Hi, In the mod_jk documentation: http://tomcat.apache.org/connectors-doc/reference/workers.html I see correctly the description for the Avdanced Worker Directive "secret": "You can set a secret keyword on the Tomcat AJP Connector. Then only requests from workers with the same secret keyword will be accepted. Use request.useSecret="true" and request.secret="secret key word" in your Tomcat AJP Connector configuration. If you set a secret on a load balancer, all its members will inherit this secret. This feature has been added in jk 1.2.12." However, I do not see anymore these request. directives explained in the "Apache Tomcat Configuration Reference" > "The AJP Connector" http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html http://tomcat.apache.org/tomcat-5.5-doc/config/ajp.html Note: that the syntax changed from Tomcat 4.1 to Tomcat 5.5 (I do not know about 5.0). org.apache.ajp.tomcat4.Ajp13Connector was only one attribute secret="secret_word" It might be a good idea to add a line for these 2 attributes even if just simply refer to the jk documentation. Thanks - Fred -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44382] Need to add support for HTTPOnly session cookie parameter
https://issues.apache.org/bugzilla/show_bug.cgi?id=44382 Jim Manico <[EMAIL PROTECTED]> changed: What|Removed |Added Attachment #21735|0 |1 is obsolete|| --- Comment #6 from Jim Manico <[EMAIL PROTECTED]> 2008-03-31 12:52:58 PST --- Created an attachment (id=21742) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=21742) Patch to ServerCookie to include HttpOnly option Since this patch changes today's behavior, added code to provide backwards compatibility that defaults to HttpOnly being turned off for this initial release. Would like to default this to on, someday. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HttpOnly and Kauai
nice, since we work RTC (Review-Then-Commit) you're gonna have to extend this invitation to everyone who votes for the patch's inclusion :) Filip Jim Manico wrote: Gentlemen, As a blatant bribery attempt - I live and work on the island of Kauai in Hawaii. Whomever commits this *https://issues.apache.org/bugzilla/show_bug.cgi?id=44382* Will win a free stay in my guest house. :) Food included. Zip code 96703, <5 minutes from the beach. =D No virus found in this incoming message. Checked by AVG. Version: 7.5.519 / Virus Database: 269.22.1/1352 - Release Date: 3/31/2008 10:13 AM - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HttpOnly and Kauai
> nice, since we work RTC (Review-Then-Commit) you're gonna have to extend > this invitation to everyone who votes for the patch's inclusion :) Lol > Filip Beer provided ? > Jim Manico wrote: > > Gentlemen, > > > > As a blatant bribery attempt - I live and work on the island of Kauai > > in Hawaii. > > > > Whomever commits this > > *https://issues.apache.org/bugzilla/show_bug.cgi?id=44382* > > > > Will win a free stay in my guest house. :) Food included. Zip code > > 96703, <5 minutes from the beach. > > > > =D > > > > > > > > > No virus found in this incoming message. > > Checked by AVG. > > Version: 7.5.519 / Virus Database: 269.22.1/1352 - Release Date: 3/31/2008 > 10:13 AM > > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HttpOnly and Kauai
Tequila, tents, food and wireless access provided!!! Tomcat coding party at Jim's house! nice, since we work RTC (Review-Then-Commit) you're gonna have to extend this invitation to everyone who votes for the patch's inclusion :) Lol Filip Beer provided ? Jim Manico wrote: > Gentlemen, > > As a blatant bribery attempt - I live and work on the island of Kauai > in Hawaii. > > Whomever commits this > *https://issues.apache.org/bugzilla/show_bug.cgi?id=44382* > > Will win a free stay in my guest house. :) Food included. Zip code > 96703, <5 minutes from the beach. > > =D > > > No virus found in this incoming message. > Checked by AVG. > Version: 7.5.519 / Virus Database: 269.22.1/1352 - Release Date: 3/31/2008 10:13 AM > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Jim Manico Senior Application Security Engineer Aspect Security
DO NOT REPLY [Bug 44505] socket bindexception in tomcat 6 on pure ipv6 solaris
https://issues.apache.org/bugzilla/show_bug.cgi?id=44505 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED Resolution||DUPLICATE --- Comment #3 from Mark Thomas <[EMAIL PROTECTED]> 2008-03-31 14:55:47 PST --- InetAddress.getByName(null); might be more elegant but I believe the fix for the duplicate also addresses this. The fix is in 6.0.16 onwards. *** This bug has been marked as a duplicate of bug 43588 *** -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 43588] Tomcat uses hardcoded 127.0.0.1 for localhost
https://issues.apache.org/bugzilla/show_bug.cgi?id=43588 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added CC||[EMAIL PROTECTED] --- Comment #15 from Mark Thomas <[EMAIL PROTECTED]> 2008-03-31 14:55:47 PST --- *** Bug 44505 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r643181 - /tomcat/trunk/webapps/docs/config/ajp.xml
Author: markt Date: Mon Mar 31 15:19:20 2008 New Revision: 643181 URL: http://svn.apache.org/viewvc?rev=643181&view=rev Log: Fix bug 44715. Document use of secret for AJP connector. Modified: tomcat/trunk/webapps/docs/config/ajp.xml Modified: tomcat/trunk/webapps/docs/config/ajp.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/ajp.xml?rev=643181&r1=643180&r2=643181&view=diff == --- tomcat/trunk/webapps/docs/config/ajp.xml (original) +++ tomcat/trunk/webapps/docs/config/ajp.xml Mon Mar 31 15:19:20 2008 @@ -274,6 +274,18 @@ to a particular port number on a particular IP address. + + Only requests from workers with this secret keyword will be accepted. + This attribute only has an effect if request.useSecret is + true. + + + + If set to true, then only requests from workers with the + same secret keyword will be accepted. This is set to false + by default. + + If set to true, the TCP_NO_DELAY option will be set on the server socket, which improves performance under most - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r643184 - /tomcat/tc6.0.x/trunk/STATUS.txt
Author: markt Date: Mon Mar 31 15:21:01 2008 New Revision: 643184 URL: http://svn.apache.org/viewvc?rev=643184&view=rev Log: Add proposal and missing svn references for previous proposals. Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=643184&r1=643183&r2=643184&view=diff == --- tomcat/tc6.0.x/trunk/STATUS.txt (original) +++ tomcat/tc6.0.x/trunk/STATUS.txt Mon Mar 31 15:21:01 2008 @@ -109,11 +109,21 @@ * No roles (deny all) trumps no auth-constraint (allow all) https://issues.apache.org/bugzilla/show_bug.cgi?id=44529 + http://svn.apache.org/viewvc?rev=642542&view=rev +1: markt, remm -1: * Fix reading of multi-byte request data https://issues.apache.org/bugzilla/show_bug.cgi?id=44494 + http://svn.apache.org/viewvc?rev=642814&view=rev (clean-up) + http://svn.apache.org/viewvc?rev=642816&view=rev (more clean-up) + http://svn.apache.org/viewvc?rev=642819&view=rev (the fix) This is Remy's patch from comment #23 less the one bad line (comment #28) +1: markt, remm -1: + +* Document missing secret attributes + https://issues.apache.org/bugzilla/show_bug.cgi?id=44715 + http://svn.apache.org/viewvc?rev=643181&view=rev + +1: mark + -1: - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
svn commit: r643186 - /tomcat/current/tc5.5.x/STATUS.txt
Author: markt Date: Mon Mar 31 15:22:32 2008 New Revision: 643186 URL: http://svn.apache.org/viewvc?rev=643186&view=rev Log: Add proposal and missing svn references for previous proposals. Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc5.5.x/STATUS.txt?rev=643186&r1=643185&r2=643186&view=diff == --- tomcat/current/tc5.5.x/STATUS.txt (original) +++ tomcat/current/tc5.5.x/STATUS.txt Mon Mar 31 15:22:32 2008 @@ -89,12 +89,22 @@ * No roles (deny all) trumps no auth-constraint (allow all) https://issues.apache.org/bugzilla/show_bug.cgi?id=44529 + http://svn.apache.org/viewvc?rev=642542&view=rev +1: markt -1: * Fix reading of multi-byte request data https://issues.apache.org/bugzilla/show_bug.cgi?id=44494 + http://svn.apache.org/viewvc?rev=642814&view=rev (clean-up) + http://svn.apache.org/viewvc?rev=642816&view=rev (more clean-up) + http://svn.apache.org/viewvc?rev=642819&view=rev (the fix) This is Remy's patch from comment #23 less the one bad line (comment #28) NB: Also fixes 4.1.37 +1: markt -1: + +* Document missing secret attributes + https://issues.apache.org/bugzilla/show_bug.cgi?id=44715 + http://svn.apache.org/viewvc?rev=643181&view=rev + +1: mark + -1: - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44715] Missing attribute in the AJP Connector (jk) configuration Doc.
https://issues.apache.org/bugzilla/show_bug.cgi?id=44715 --- Comment #1 from Mark Thomas <[EMAIL PROTECTED]> 2008-03-31 15:20:45 PST --- This has been fixed intrunk and proposed for 6.0.x and 5.5.x. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
DO NOT REPLY [Bug 44721] New: jsp expression not returning proper value for null pointer
https://issues.apache.org/bugzilla/show_bug.cgi?id=44721 Summary: jsp expression not returning proper value for null pointer Product: Tomcat 6 Version: 6.0.13 Platform: PC OS/Version: Windows Server 2003 Status: NEW Severity: regression Priority: P2 Component: Jasper AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] I have a jsp that has following code: <% String CTOrigUrl = request.getPrameter("CT_ORIG_URL"); if(CTOrigUrl == null) CTOrigUrl = request.getParameter("ct_orig_url"); ... %> ... This results in the value orig_url=nullbeing sent instead of value=empty string. Should JSTL return an empty srring ??? ??? Tomcat 5.x jdk compiler didnot exhibit this behavior -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]