Re: Adding HTTPOnly support to Tomcat

Jim Manico wrote: Any thoughts would be greatly appreciated. If you add your patch (in diff -u format) to the bugzilla enhancement request you created then there is a much better chance it won't get forgotten. Mark - To uns

Re: Adding HTTPOnly support to Tomcat

On Sun, 2008-03-09 at 19:56 -0700, Filip Hanik - Dev Lists wrote: > haven't forgotten about you, it's still on the todo list. I am against adding support for IE only hacks ? Rémy - To unsubscribe, e-mail: [EMAIL PROTECTED] For

RE: Re:Reorder the http header generated by tomcat

Hi Filip & all, Thanks for your reply, I'm trying to reorder the header to make another Network management SW handle http response easier. Now I use another way to resolve the problem(change some code in the NMS) since I don't know how reorder it yet.. B.R Han Filip Hanik - Dev Lists wrote:

svn commit: r635539 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: remm Date: Mon Mar 10 05:11:58 2008 New Revision: 635539 URL: http://svn.apache.org/viewvc?rev=635539&view=rev Log: - Votes. Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=6355

Re: Adding HTTPOnly support to Tomcat

Rely, This is not a ms hack, but a security enhancement supported by all browsers. Do some research and get back to us. Jim On Mar 10, 2008, at 5:33 AM, Remy Maucherat <[EMAIL PROTECTED]> wrote: On Sun, 2008-03-09 at 19:56 -0700, Filip Hanik - Dev Lists wrote: haven't forgotten about you,

Re: Adding HTTPOnly support to Tomcat

On Mon, 2008-03-10 at 08:16 -0400, Jim Manico wrote: > Rely, > > This is not a ms hack, but a security enhancement supported by all > browsers. Do some research and get back to us. This feature does not have good browser support, and I think it's a hack. Well, at least you know how I will vote

DO NOT REPLY [Bug 41912] JSF datatable does not work on tomcat 6.0.9

https://issues.apache.org/bugzilla/show_bug.cgi?id=41912 Rangel Preis <[EMAIL PROTECTED]> changed: What|Removed |Added CC||[EMAIL PROTECTED

DO NOT REPLY [Bug 44571] New: Limits busy per worker to a threshold

https://issues.apache.org/bugzilla/show_bug.cgi?id=44571 Summary: Limits busy per worker to a threshold Product: Tomcat 6 Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority

DO NOT REPLY [Bug 44571] Limits busy per worker to a threshold

https://issues.apache.org/bugzilla/show_bug.cgi?id=44571 --- Comment #1 from Zealot <[EMAIL PROTECTED]> 2008-03-10 06:28:02 PST --- Created an attachment (id=21648) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=21648) busy limit patch -- Configure bugmail: https://issues.apach

DO NOT REPLY [Bug 44502] NIO connector under heavy load drops incoming requests

https://issues.apache.org/bugzilla/show_bug.cgi?id=44502 Filip Hanik <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEEDINFO|RESOLVED

Re: Adding HTTPOnly support to Tomcat

Remy, I recommend more careful research on this topic. IE 6+ supports HttpOnly FireFox 2.0.0.6+ support HttpOnly Opera 9.5+ has promised HttpOnly support Safari is still considering On Mon, 2008-03-10 at 08:16 -0400, Jim Manico wrote: Rely, This is not a ms hack, but a security enhancement

svn commit: r635680 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: markt Date: Mon Mar 10 13:28:32 2008 New Revision: 635680 URL: http://svn.apache.org/viewvc?rev=635680&view=rev Log: Propose adding systemprops doc Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/tr

svn commit: r635704 - /tomcat/current/tc5.5.x/STATUS.txt

Author: markt Date: Mon Mar 10 14:34:56 2008 New Revision: 635704 URL: http://svn.apache.org/viewvc?rev=635704&view=rev Log: Add a couple of proposals. Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc

DO NOT REPLY [Bug 44556] Filename for commons-logging-api changed, but config files doesn't changed.

https://issues.apache.org/bugzilla/show_bug.cgi?id=44556 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Severity|blocker |normal --- Co

svn commit: r635718 - /tomcat/current/tc4.1.x/STATUS.txt

Author: markt Date: Mon Mar 10 15:04:05 2008 New Revision: 635718 URL: http://svn.apache.org/viewvc?rev=635718&view=rev Log: Propose back port of security related fix. CVE-2008-0128. Modified: tomcat/current/tc4.1.x/STATUS.txt Modified: tomcat/current/tc4.1.x/STATUS.txt URL: http://svn.apac

svn commit: r635720 - in /tomcat/site/trunk: docs/security-4.html docs/security-5.html docs/security-6.html xdocs/security-4.xml xdocs/security-5.xml xdocs/security-6.xml

Author: markt Date: Mon Mar 10 15:05:18 2008 New Revision: 635720 URL: http://svn.apache.org/viewvc?rev=635720&view=rev Log: Add CVE-2008-0128 which was missing. Modified: tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.h

DO NOT REPLY [Bug 44554] Null Pointer exception deploying WAR

https://issues.apache.org/bugzilla/show_bug.cgi?id=44554 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED

DO NOT REPLY [Bug 44571] Limits busy per worker to a threshold

https://issues.apache.org/bugzilla/show_bug.cgi?id=44571 Zealot <[EMAIL PROTECTED]> changed: What|Removed |Added Component|Connectors |Native:JK -- Conf

DO NOT REPLY [Bug 44047] Provide a way for Tomcat to serve up error pages when too busy

https://issues.apache.org/bugzilla/show_bug.cgi?id=44047 Zealot <[EMAIL PROTECTED]> changed: What|Removed |Added Component|Catalina|Native:JK -- Conf