Re: [PR] [Bug 69693] - Improve readability and type safety by changing parsingRequestLinePhase to an enum in Http11InputBuffer [tomcat]

2025-06-04 Thread via GitHub
devjohnpark commented on PR #855: URL: https://github.com/apache/tomcat/pull/855#issuecomment-2942968996 @markt-asf I agree that explicitly including the order in enum constant names, like PHASE_0_NEW, enhances clarity without requiring HTTP/1.1 spec knowledge. So I updated RequestLineParse

Re: [PR] [Bug 69693] - Improve readability and type safety by changing parsingRequestLinePhase to an enum in Http11InputBuffer [tomcat]

2025-06-04 Thread via GitHub
YongGoose commented on PR #855: URL: https://github.com/apache/tomcat/pull/855#issuecomment-2942917295 @markt-asf This is just a simple question out of curiosity — doesn’t the Tomcat project use Copilot for code reviews? I’m a committer for the Seata project, and I’ve found that C

Re: [PR] [Bug 69693] - Improve readability and type safety by changing parsingRequestLinePhase to an enum in Http11InputBuffer [tomcat]

2025-06-04 Thread via GitHub
YongGoose commented on PR #855: URL: https://github.com/apache/tomcat/pull/855#issuecomment-2942678690 > I'm not convinced. With `int` the order is clear and obvious. With the proposed `enum` the correct order is less clear and depends on the reader knowing the detail of the HTTP/1.1 spec f

[PR] Enhance isEncodeable to determine putting session id in URL using path parameter [tomcat]

2025-06-04 Thread via GitHub
Chenjp opened a new pull request, #865: URL: https://github.com/apache/tomcat/pull/865 It is not suitable to encode session id in URL if client support cookie. per discuss in #862 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to Gi

[Bug 69706] Session persistence broken when persistAuthentication is turned on in tomcat 11.0.7

2025-06-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69706 --- Comment #3 from Christopher Schultz --- +1 for just using an Integer which can be null. -- You are receiving this mail because: You are the assignee for the bug. - To uns

Buildbot success in on tomcat-9.0.x

2025-06-04 Thread buildbot
Build status: Build succeeded! Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/37/builds/1422 Blamelist: Chenjp , Mark Thomas , Markus Hoffrogge Build Text: build successful Status Detected: restored build Build Source Stamp: [branch 9.0.x] 6a944854ff95cc39f5ad7342a1411349e33

Buildbot failure in on tomcat-10.1.x

2025-06-04 Thread buildbot
Build status: BUILD FAILED: failed Snapshot deployed to ASF Maven snapshot repository (failure) Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/44/builds/1770 Blamelist: Mark Thomas , Markus Hoffrogge Build Text: failed Snapshot deployed to ASF Maven snapshot repository (fai

Re: svn commit: r1926115 - in /tomcat/site/trunk: docs/index.html xdocs/index.xml

2025-06-04 Thread Mark Thomas
On 04/06/2025 13:05, schu...@apache.org wrote: Author: schultz Date: Wed Jun 4 12:05:18 2025 New Revision: 1926115 URL: http://svn.apache.org/viewvc?rev=1926115&view=rev Log: Fix release date (year) for tcnative 2.0.9 Tx for fixing that. Mark ---

[Bug 69706] Session persistence broken when persistAuthentication is turned on in tomcat 11.0.7

2025-06-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69706 --- Comment #2 from Remy Maucherat --- Created attachment 40043 --> https://bz.apache.org/bugzilla/attachment.cgi?id=40043&action=edit Patch for review -- You are receiving this mail because: You are the assignee for the bug. --

(tomcat) branch 11.0.x updated: Remove trailing space

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 1c2dfffc07 Remove trailing space 1c2dfffc07 is de

(tomcat) branch 9.0.x updated: Remove trailing space

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 6a944854ff Remove trailing space 6a944854ff is desc

(tomcat) branch 10.1.x updated: Remove trailing space

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 2c5a2bb008 Remove trailing space 2c5a2bb008 is de

(tomcat) branch main updated: Remove trailing space

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 91155c77e7 Remove trailing space 91155c77e7 is descri

(tomcat) branch main updated: FollowUp on Improve CVE-2024-56337 protection

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 8659c63624 FollowUp on Improve CVE-2024-56337 protect

Buildbot failure in on tomcat-9.0.x

2025-06-04 Thread buildbot
Build status: BUILD FAILED: failed compile (failure) Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/37/builds/1421 Blamelist: Mark Thomas Build Text: failed compile (failure) Status Detected: new failure Build Source Stamp: [branch 9.0.x] 793291e482022219d1c6032d1ffae9fcd916d

(tomcat) branch 11.0.x updated: Do what the comment says - keep options aligned

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 7b9426eea6 Do what the comment says - keep option

(tomcat) branch 11.0.x updated: FollowUp on Improve CVE-2024-56337 protection

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new f07fedca37 FollowUp on Improve CVE-2024-56337 pro

(tomcat) branch 10.1.x updated: FollowUp on Improve CVE-2024-56337 protection

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 076cd7a44e FollowUp on Improve CVE-2024-56337 pro

[Bug 69706] Session persistence broken when persistAuthentication is turned on in tomcat 11.0.7

2025-06-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69706 --- Comment #1 from Remy Maucherat --- Looking at the commit, maybe the API change needs to be reverted. It is possible to add a boolean to determine if the value has been explicitly set instead (or use an Integer). -- You are receiving this

(tomcat) branch 9.0.x updated: Add changelog entry

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 28af7886b5 Add changelog entry 28af7886b5 is descri

(tomcat) 02/03: Improve service.bat JvmOptions9 / JvmOptions for consistent option separator

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 52e5a885c42f664c5c2b93b79ee82c41dd1ae6e1 Author: Markus Hoffrogge AuthorDate: Tue May 20 20:50:44 2025 +0200 Improve

(tomcat) 03/03: Update phrasing in comments

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 159cdc8856cfd45524356a58e53991bf72ece8e7 Author: Markus Hoffrogge AuthorDate: Wed May 21 12:27:01 2025 +0200 Update p

(tomcat) 01/03: FollowUp on Improve CVE-2024-56337 protection

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit db8d3b4330d16d3be10a54d0084f199c99b68fff Author: Markus Hoffrogge AuthorDate: Tue May 20 17:21:54 2025 +0200 FollowUp

(tomcat) branch 9.0.x updated (4e86315dc1 -> 159cdc8856)

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 4e86315dc1 Make comments consistent. Add changelog entry. new db8d3b4330 FollowUp on Improve CVE-2024-56337 protect

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-06-04 Thread via GitHub
markt-asf merged PR #858: URL: https://github.com/apache/tomcat/pull/858 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o

(tomcat) branch 10.1.x updated: Make comments consistent. Add changelog entry.

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new f830b9f96c Make comments consistent. Add changelo

(tomcat) branch 9.0.x updated: Make comments consistent. Add changelog entry.

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 4e86315dc1 Make comments consistent. Add changelog

(tomcat) branch 11.0.x updated: Make comments consistent. Add changelog entry.

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new b57d7e875c Make comments consistent. Add changelo

(tomcat) branch 9.0.x updated: follow valid text rewrite map file syntax mentioned in httpd apache docs#rewritemap

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 19a240ae13 follow valid text rewrite map file synt

(tomcat) branch main updated: follow valid text rewrite map file syntax mentioned in httpd apache docs#rewritemap

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 289fade4d2 follow valid text rewrite map file syntax

Re: [PR] FIX: add inline comment support in text rewrite map file [tomcat]

2025-06-04 Thread via GitHub
markt-asf merged PR #863: URL: https://github.com/apache/tomcat/pull/863 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o

[Bug 69706] New: Session persistence broken when persistAuthentication is turned on in tomcat 11.0.7

2025-06-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69706 Bug ID: 69706 Summary: Session persistence broken when persistAuthentication is turned on in tomcat 11.0.7 Product: Tomcat 11 Version: unspecified Hardware: All

Re: [PR] [Bug 69693] - Improve readability and type safety by changing parsingRequestLinePhase to an enum in Http11InputBuffer [tomcat]

2025-06-04 Thread via GitHub
markt-asf commented on PR #855: URL: https://github.com/apache/tomcat/pull/855#issuecomment-2939822823 I'm not convinced. With `int` the order is clear and obvious. With the proposed `enum` the correct order is less clear and depends on the reader knowing the detail of the HTTP/1.1 spec for

(tomcat) 02/02: Update Checkstyle to 10.25.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 84cd7ada98b91b7e5b5689537240b0b566ef8c5b Author: Mark Thomas AuthorDate: Wed Jun 4 11:57:43 2025 +0100 Update Checksty

(tomcat) branch main updated (d54e8e0a4c -> 84cd7ada98)

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from d54e8e0a4c Correct the hash (copy/paste error) new aad9fd259a Update EasyMock to 5.6.0 new 84cd7ada98 Update Ch

(tomcat) branch 10.1.x updated: Update Checkstyle to 10.25.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 1d9c2a56dd Update Checkstyle to 10.25.0 1d9c2a56d

(tomcat) branch 9.0.x updated: Update EasyMock to 5.6.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 17a8feb006 Update EasyMock to 5.6.0 17a8feb006 is d

(tomcat) branch 9.0.x updated: Update Checkstyle to 10.25.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 793291e482 Update Checkstyle to 10.25.0 793291e482

(tomcat) branch 11.0.x updated: Update Checkstyle to 10.25.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 9ea7c0246b Update Checkstyle to 10.25.0 9ea7c0246

(tomcat) branch 10.1.x updated: Update EasyMock to 5.6.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 09b25679b4 Update EasyMock to 5.6.0 09b25679b4 is

(tomcat) branch 11.0.x updated: Update EasyMock to 5.6.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new c52f9fefca Update EasyMock to 5.6.0 c52f9fefca is

(tomcat) 01/02: Update EasyMock to 5.6.0

2025-06-04 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit aad9fd259a0baac1d8a6e9e1e212893e9902cf2e Author: Mark Thomas AuthorDate: Wed Jun 4 11:54:29 2025 +0100 Update EasyMock

svn commit: r1926115 - in /tomcat/site/trunk: docs/index.html xdocs/index.xml

2025-06-04 Thread schultz
Author: schultz Date: Wed Jun 4 12:05:18 2025 New Revision: 1926115 URL: http://svn.apache.org/viewvc?rev=1926115&view=rev Log: Fix release date (year) for tcnative 2.0.9 Modified: tomcat/site/trunk/docs/index.html tomcat/site/trunk/xdocs/index.xml Modified: tomcat/site/trunk/docs/index

(tomcat-native) branch main updated: Add note about needing a C compiler and autoconf/automake

2025-06-04 Thread schultz
This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-native.git The following commit(s) were added to refs/heads/main by this push: new 82c308fd4 Add note about needing a C compile

Re: Plans for 11.0.8 tag

2025-06-04 Thread Rémy Maucherat
On Wed, Jun 4, 2025 at 12:47 PM Mark Thomas wrote: > > Hi all, > > My current plan for 11.0.8 is to tag towards the end of this week. There > are a few PRs to review, I need to do the usual dependency checks and > i18n updates as well as a couple of fixes I have sat locally that I need > to clean

Plans for 11.0.8 tag

2025-06-04 Thread Mark Thomas
Hi all, My current plan for 11.0.8 is to tag towards the end of this week. There are a few PRs to review, I need to do the usual dependency checks and i18n updates as well as a couple of fixes I have sat locally that I need to clean up and commit. Mark ---

Re: [PR] fix arbitrary file access during archive extraction zipslip [tomcat]

2025-06-04 Thread via GitHub
markt-asf commented on PR #864: URL: https://github.com/apache/tomcat/pull/864#issuecomment-2939391552 Potential security vulnerabilities **DO NOT** belong in public pull requests. Guidance on how to report security vulnerabilities responsibly can be found at: https://tomcat.apache

Re: [PR] fix arbitrary file access during archive extraction zipslip [tomcat]

2025-06-04 Thread via GitHub
markt-asf closed pull request #864: fix arbitrary file access during archive extraction zipslip URL: https://github.com/apache/tomcat/pull/864 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the spe

[PR] fix arbitrary file access during archive extraction zipslip [tomcat]

2025-06-04 Thread via GitHub
cur1pro opened a new pull request, #864: URL: https://github.com/apache/tomcat/pull/864 To fix the issue, we need to ensure that paths derived from `entry.getName()` are validated to prevent directory traversal attacks. This involves: 1. Normalizing the path using `java.nio.file.

Re: [PR] BZ 69699 - Propagate Session ID path parameter during rewrite redirect [tomcat]

2025-06-04 Thread via GitHub
Chenjp commented on PR #862: URL: https://github.com/apache/tomcat/pull/862#issuecomment-2939202088 > @Chenjp You should look carefully at the implementation of `encodeRedirectURL()` before you comment further. en...Current implementation checks session id source(COOKIES or PathParam

Re: [PR] BZ 69699 - Propagate Session ID path parameter during rewrite redirect [tomcat]

2025-06-04 Thread via GitHub
rmaucher commented on PR #862: URL: https://github.com/apache/tomcat/pull/862#issuecomment-2939013231 Servlet containers have to implement that (very complex) helper method that does everything to achieve session tracking, depending on how the session tracking was sent by the client, and th

Re: [PR] BZ 69699 - Propagate Session ID path parameter during rewrite redirect [tomcat]

2025-06-04 Thread via GitHub
markt-asf commented on PR #862: URL: https://github.com/apache/tomcat/pull/862#issuecomment-2938933585 @Chenjp You should look carefully at the implementation of `encodeRedirectURL()` before you comment further. -- This is an automated message from the Apache Git Service. To respond to t