To whom it may engage...
This is an automated request, but not an unsolicited one. For
more information please visit http://gump.apache.org/nagged.html,
and/or contact the folk at gene...@gump.apache.org.
Project tomcat-trunk-test-nio2 has an issue affecting its community integration.
T
To whom it may engage...
This is an automated request, but not an unsolicited one. For
more information please visit http://gump.apache.org/nagged.html,
and/or contact the folk at gene...@gump.apache.org.
Project tomcat-tc8.0.x-test-bio has an issue affecting its community
integration.
Author: violetagg
Date: Fri Oct 16 22:27:47 2015
New Revision: 1709120
URL: http://svn.apache.org/viewvc?rev=1709120&view=rev
Log:
Basic implementation for CSRF protection for REST.
Documentation will follow.
Added:
tomcat/trunk/java/org/apache/catalina/filters/RestCsrfPreventionFilter.java
2015-10-16 17:18 GMT+02:00 Arjan Tijms :
> On Fri, Oct 16, 2015 at 4:27 PM, remm [via Tomcat]
> wrote:
> > 2015-10-16 16:11 GMT+02:00 Arjan Tijms <[hidden email]>:
> > I was not talking about this future specification, since I never had a
> look.
>
> Okay, my bad. I thought it was in reply to the
Github user jbcpollak closed the pull request at:
https://github.com/apache/tomcat-maven-plugin/pull/4
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the f
Author: markt
Date: Fri Oct 16 16:39:21 2015
New Revision: 1709054
URL: http://svn.apache.org/viewvc?rev=1709054&view=rev
Log:
Fill in the 9.0.x migration TODOs
Modified:
tomcat/site/trunk/docs/migration-9.html
tomcat/site/trunk/xdocs/migration-9.xml
Modified: tomcat/site/trunk/docs/migr
On Fri, Oct 16, 2015 at 4:27 PM, remm [via Tomcat]
wrote:
> 2015-10-16 16:11 GMT+02:00 Arjan Tijms <[hidden email]>:
> I was not talking about this future specification, since I never had a look.
Okay, my bad. I thought it was in reply to the JSR 375 work.
But what did you mean exactly then? Tom
https://bz.apache.org/bugzilla/show_bug.cgi?id=58501
Remy Maucherat changed:
What|Removed |Added
Resolution|--- |INVALID
Status|NEW
https://bz.apache.org/bugzilla/show_bug.cgi?id=58501
Bug ID: 58501
Summary: paginaprueba
Product: Tomcat 6
Version: unspecified
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: Catalina
2015-10-16 16:11 GMT+02:00 Arjan Tijms :
> Hi,
>
> On Fri, Oct 16, 2015 at 3:35 PM, remm [via Tomcat]
> wrote:
> > I still think it is far preferable at the moment to implement 4 or 5
> > proprietary auth "modules"
>
> Well, the higher level functionality does not necessarily mean that
> JSR 375
Hi,
On Fri, Oct 16, 2015 at 3:35 PM, remm [via Tomcat]
wrote:
> I still think it is far preferable at the moment to implement 4 or 5
> proprietary auth "modules"
Well, the higher level functionality does not necessarily mean that
JSR 375 is going to provide standard authentication modules that b
2015-10-16 13:25 GMT+02:00 Arjan Tijms :
> Hi,
>
> Those are indeed the main reasons for JASPIC. JASPIC authentication
> modules should be fully equivalent to any of the build-in
> authentication mechanisms like FORM, BASIC, etc in terms of what they
> can do and how they are treated by the contai
Author: markt
Date: Fri Oct 16 12:03:45 2015
New Revision: 1708968
URL: http://svn.apache.org/viewvc?rev=1708968&view=rev
Log:
Re-organise migration guide so it is easier on the eye (fewer sections)
Add a section for 9.0.x migration.
Added:
tomcat/site/trunk/docs/migration-9.html (with prop
Author: markt
Date: Fri Oct 16 12:02:46 2015
New Revision: 1708967
URL: http://svn.apache.org/viewvc?rev=1708967&view=rev
Log:
Version update
Modified:
tomcat/site/trunk/docs/migration-7.html
tomcat/site/trunk/docs/migration-8.html
tomcat/site/trunk/xdocs/migration-7.xml
tomcat/si
Hi,
On Fri, Oct 16, 2015 at 12:56 PM, Jess Holle [via Tomcat]
wrote:
> My understanding with JASPIC is that one should be able to add
> authentication mechanisms that (1) use the same code across any
> container that supports JASPIC [as Mark notes] and (2) still use
> standard security constraint
Author: markt
Date: Fri Oct 16 11:17:55 2015
New Revision: 1708958
URL: http://svn.apache.org/viewvc?rev=1708958&view=rev
Log:
First pass at updating server.xml for 9.0.x
Modified:
tomcat/trunk/conf/server.xml
Modified: tomcat/trunk/conf/server.xml
URL:
http://svn.apache.org/viewvc/tomcat/t
Author: violetagg
Date: Fri Oct 16 11:16:35 2015
New Revision: 1708957
URL: http://svn.apache.org/viewvc?rev=1708957&view=rev
Log:
Extract common functionality from CsrfPreventionFilter to
CsrfPreventionFilterBase
Added:
tomcat/trunk/java/org/apache/catalina/filters/CsrfPreventionFilterBase.
2015-10-16 12:51 GMT+02:00 Mark Thomas :
> The main benefit for me is that once Tomcat implements JASPIC, there are
> a handful of 3rd party modules that users will then be able to use just
> by adding the lib to Tomcat. It also provides a standard API for users
> to work against if they want to d
On 10/16/2015 5:51 AM, Mark Thomas wrote:
On 16/10/2015 11:44, Rémy Maucherat wrote:
What's not clear to me at this point is if jaspic should replace the
current "classic" auth methods. For example, the supposed benefit of jaspic
is that it makes container auth not proprietary, but looking at th
On 16/10/2015 11:44, Rémy Maucherat wrote:
> What's not clear to me at this point is if jaspic should replace the
> current "classic" auth methods. For example, the supposed benefit of jaspic
> is that it makes container auth not proprietary, but looking at the code
> that is there it sounds sti
On 16/10/2015 11:40, Mark Thomas wrote:
> (off list because I'm going to mention something that is on a private list)
Apologies all. My bad. Hit reply and forgot to edit the addressee.
Mark
-
To unsubscribe, e-mail: dev-unsubscr
2015-10-15 3:03 GMT+02:00 Fjodor Versinin :
> Hi!
> Actually, I would like to continue to work on this, but not in GSOC scope
> anymore, because that expirience was too stressful for me.
> What about current JASPIC implementation, it is almost ready, so I think
> it would be better to keep already
(off list because I'm going to mention something that is on a private list)
On 15/10/2015 12:06, Martin Grigorov wrote:
> Hi Mark,
>
> On Thu, Oct 15, 2015 at 12:24 PM, Mark Thomas wrote:
>
>> On 01/12/2014 16:24, Martin Grigorov wrote:
>>> Hi,
>>>
>>> On Mon, Dec 1, 2014 at 4:56 PM, Mark Thoma
Hi,
As you may have noticed I have been busy with the Servlet 4.0 updates in
the last week or so, taking advantage of all the previous work on
connector refactoring and the HTTP/2 implementation.
9.0.x is now aligned with Servlet 4.0.b01 plus a couple of minor API
tweaks made post that release.
The Buildbot has detected a restored build on builder tomcat-trunk while
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/tomcat-trunk/builds/457
Buildbot URL: http://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchSche
Author: markt
Date: Fri Oct 16 10:05:38 2015
New Revision: 1708941
URL: http://svn.apache.org/viewvc?rev=1708941&view=rev
Log:
Servlet 4.0
Complete a PushBuilder TODO - Cookies
Modified:
tomcat/trunk/java/org/apache/catalina/core/ApplicationPushBuilder.java
Modified: tomcat/trunk/java/org/ap
The Buildbot has detected a new failure on builder tomcat-trunk while building
ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/tomcat-trunk/builds/456
Buildbot URL: http://ci.apache.org/
Buildslave for this Build: silvanus_ubuntu
Build Reason: The AnyBranchSchedul
Author: markt
Date: Fri Oct 16 08:34:07 2015
New Revision: 1708914
URL: http://svn.apache.org/viewvc?rev=1708914&view=rev
Log:
Fix javadoc warnings
Modified:
tomcat/trunk/java/org/apache/tomcat/util/http/CookieProcessor.java
Modified: tomcat/trunk/java/org/apache/tomcat/util/http/CookieProce
28 matches
Mail list logo