[GitHub] [tomcat] ppkarwasz opened a new pull request #470: Adds "javax.annotation" to filter

2022-01-28 Thread GitBox
ppkarwasz opened a new pull request #470: URL: https://github.com/apache/tomcat/pull/470 This is the `javax` version of #469. Some users mistakenly add `javax.annotation-api` to their applications, which prevents Tomcat from finding `@Resource` and similar annotations on Java 9+.

[GitHub] [tomcat] ppkarwasz opened a new pull request #469: Adds "jakarta.annotation" to filter

2022-01-28 Thread GitBox
ppkarwasz opened a new pull request #469: URL: https://github.com/apache/tomcat/pull/469 Some users from mistakenly add `jakarta.annotation-api` to their applications, which prevents Tomcat from finding `@Resource` and similar annotations on the servlets. See [this Stack Overflow question

[Bug 65853] [CsrfPreventionFilter] Extract evaluation of skipNonceCheck into overridable method

2022-01-28 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65853 --- Comment #1 from Marvin Fröhlich --- Sorry, my suggested implementation was a little rushed. Here is a corrected version. protected boolean getSkipNonceCheck(HttpServletRequest request) { if (!Constants.METHOD_GET.e