[Bug 66362] listening all local addresses by default is not security best practice

https://bz.apache.org/bugzilla/show_bug.cgi?id=66362 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 66362] listening all local addresses by default is not security best practice

https://bz.apache.org/bugzilla/show_bug.cgi?id=66362 tommydu1...@outlook.com changed: What|Removed |Added Summary|listening all local |listening all local

[Bug 66362] New: listening all local addresses by default is not compliant with security default

https://bz.apache.org/bugzilla/show_bug.cgi?id=66362 Bug ID: 66362 Summary: listening all local addresses by default is not compliant with security default Product: Tomcat 9 Version: unspecified Hardware: PC

Re: CDI and injection issues

Well, it is not that simple. Two notes on that: 1. One point is the API, injector and instance manager are the exact same API if you want a generic API so not sure it should be duplicated with different names (or said otherwise the Injector API is not generic enough to be worth a tomcat "core" ch

Re: CDI and injection issues

On Tue, Nov 22, 2022 at 6:08 PM Romain Manni-Bucau wrote: > > Hmm, how is your injector different from an InstanceManager? ( > https://github.com/apache/tomcat/blob/main/java/org/apache/tomcat/InstanceManager.java > ) > Only by not having all `newInstance` flavors? The plan is to keep on using De