svn commit: r1076586 - in /tomcat/trunk: java/org/apache/catalina/authenticator/ java/org/apache/catalina/core/ java/org/apache/catalina/startup/ test/org/apache/catalina/core/

2011-03-03 Thread markt
Author: markt Date: Thu Mar 3 11:16:51 2011 New Revision: 1076586 URL: http://svn.apache.org/viewvc?rev=1076586&view=rev Log: [SECURITY] Start of fix for issue reported on users list that @ServletSecurity annotations were ignored. This fix is not yet complete. This first part: - Triggers the loa

svn commit: r1076587 - /tomcat/trunk/java/org/apache/catalina/authenticator/AuthenticatorBase.java

2011-03-03 Thread markt
Author: markt Date: Thu Mar 3 11:24:35 2011 New Revision: 1076587 URL: http://svn.apache.org/viewvc?rev=1076587&view=rev Log: Fix typo Modified: tomcat/trunk/java/org/apache/catalina/authenticator/AuthenticatorBase.java Modified: tomcat/trunk/java/org/apache/catalina/authenticator/Authenti

svn commit: r1076589 - /tomcat/trunk/test/org/apache/catalina/core/TestStandardWrapper.java

2011-03-03 Thread markt
Author: markt Date: Thu Mar 3 11:31:56 2011 New Revision: 1076589 URL: http://svn.apache.org/viewvc?rev=1076589&view=rev Log: @ServletSecurity support Add tests for subclasses Modified: tomcat/trunk/test/org/apache/catalina/core/TestStandardWrapper.java Modified: tomcat/trunk/test/org/apach

DO NOT REPLY [Bug 50860] New: In case of invalid or empty slqQuery connection are always invalidated without usefull information

2011-03-03 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50860 Summary: In case of invalid or empty slqQuery connection are always invalidated without usefull information Product: Tomcat Modules Version: unspecified Platform: All OS/

DO NOT REPLY [Bug 43497] Add ability to escape rendered output of JSP expressions

2011-03-03 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=43497 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

DO NOT REPLY [Bug 43497] Add ability to escape rendered output of JSP expressions

2011-03-03 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=43497 --- Comment #6 from Nacho Coloma 2011-03-03 07:46:15 EST --- I disagree. 99% of the XSS injection cases are described in the mentioned link as RULE #1: escape HTML. Even worse, 99% of these cases could be implemented by simply escaping < or

svn commit: r1076606 - in /tomcat/trunk/test/org/apache/catalina: core/TestStandardWrapper.java startup/TomcatBaseTest.java

2011-03-03 Thread markt
Author: markt Date: Thu Mar 3 12:56:07 2011 New Revision: 1076606 URL: http://svn.apache.org/viewvc?rev=1076606&view=rev Log: @ServletSecurity Refactor to reduce duplication in test code Add tests for method constraints Modified: tomcat/trunk/test/org/apache/catalina/core/TestStandardWrapper

Re: Connection draining when upload to large

2011-03-03 Thread Rainer Jung
On 17.02.2011 11:58, Mark Thomas wrote: Given this, I am leaning even more towards just fixing the original issue that the connection is not dropped when the request exceeds the upload limit and leaving the rest of the behaviour unchanged. Getting back to this (and sorry for the pause): What's

DO NOT REPLY [Bug 50863] New: Memory usage increase after JSP compilation

2011-03-03 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50863 Summary: Memory usage increase after JSP compilation Product: Tomcat 6 Version: 6.0.32 Platform: PC Status: NEW Severity: normal Priority: P2 Component: Jasp

Re: [VOTE] Release jdbc-pool 1.1.0.0

2011-03-03 Thread Filip Hanik - Dev Lists
Thanks, I will get this taken care of, and reroll. Filip On 3/2/2011 8:21 PM, sebb wrote: On 2 March 2011 22:09, Filip Hanik - Dev Lists wrote: Source and Binary Packages http://people.apache.org/~fhanik/jdbc-pool/v1.1.0.0/ tomcat-juli.jar has NOTICE and LICENSE files, but none of the pool j

DO NOT REPLY [Bug 50864] New: Reconfigure pool on the fly using JMX

2011-03-03 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50864 Summary: Reconfigure pool on the fly using JMX Product: Tomcat Modules Version: unspecified Platform: PC Status: NEW Severity: normal Priority: P2 Component:

[RESULT] [VOTE] Release jdbc-pool 1.1.0.0

2011-03-03 Thread Filip Hanik - Dev Lists
I'll cancel this vote, get all the NOTICE and LICENSE files correct, as well as the tag matching the jars. best Filip On 3/2/2011 3:09 PM, Filip Hanik - Dev Lists wrote: Source and Binary Packages http://people.apache.org/~fhanik/jdbc-pool/v1.1.0.0/ Tag http://svn.apache.org/repos/asf/tomcat/t

DO NOT REPLY [Bug 50863] Memory usage increase after JSP compilation

2011-03-03 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50863 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

svn commit: r1076731 - in /tomcat/trunk/test/org/apache/catalina: core/TestStandardWrapper.java startup/TomcatBaseTest.java

2011-03-03 Thread markt
Author: markt Date: Thu Mar 3 19:13:52 2011 New Revision: 1076731 URL: http://svn.apache.org/viewvc?rev=1076731&view=rev Log: Test that individual roles are correctly handled Modified: tomcat/trunk/test/org/apache/catalina/core/TestStandardWrapper.java tomcat/trunk/test/org/apache/catali

svn commit: r1076736 - in /tomcat/trunk/modules/jdbc-pool: build.properties.default build.xml sign.sh test/org/apache/tomcat/jdbc/test/Bug50571.java test/org/apache/tomcat/jdbc/test/Bug50805.java

2011-03-03 Thread fhanik
Author: fhanik Date: Thu Mar 3 19:20:38 2011 New Revision: 1076736 URL: http://svn.apache.org/viewvc?rev=1076736&view=rev Log: Add missing files and license header Add NOTICE/LICENSE to all JAR files Added: tomcat/trunk/modules/jdbc-pool/test/org/apache/tomcat/jdbc/test/Bug50571.java Modifi

svn commit: r1076740 - /tomcat/tags/JDBC_POOL_1_1_0_1/

2011-03-03 Thread fhanik
Author: fhanik Date: Thu Mar 3 19:22:19 2011 New Revision: 1076740 URL: http://svn.apache.org/viewvc?rev=1076740&view=rev Log: New tag with same code as 1.1.0.0 but corrected license files and added missing test Added: tomcat/tags/JDBC_POOL_1_1_0_1/ (props changed) - copied from r10

[VOTE] Release jdbc-pool 1.1.0.1

2011-03-03 Thread Filip Hanik - Dev Lists
Source and Binary Packages http://people.apache.org/~fhanik/jdbc-pool/v1.1.0.1/ Tag http://svn.apache.org/repos/asf/tomcat/tags/JDBC_POOL_1_1_0_1/ Documentation http://people.apache.org/~fhanik/jdbc-pool/jdbc-pool.html The proposed 1.1.0.1 release is: [ ] Broken - do not release [ ] Alpha - g

Re: svn commit: r1076736 - in /tomcat/trunk/modules/jdbc-pool: build.properties.default build.xml sign.sh test/org/apache/tomcat/jdbc/test/Bug50571.java test/org/apache/tomcat/jdbc/test/Bug50805.java

2011-03-03 Thread Konstantin Kolinko
2011/3/3 : > Author: fhanik > Date: Thu Mar  3 19:20:38 2011 > New Revision: 1076736 > > URL: http://svn.apache.org/viewvc?rev=1076736&view=rev > Log: > Add missing files and license header > Add NOTICE/LICENSE to all JAR files > > Added: >     > tomcat/trunk/modules/jdbc-pool/test/org/apache/tomc

Re: [VOTE] Release jdbc-pool 1.1.0.1

2011-03-03 Thread sebb
On 3 March 2011 19:24, Filip Hanik - Dev Lists wrote: > Source and Binary Packages > http://people.apache.org/~fhanik/jdbc-pool/v1.1.0.1/ > > Tag > http://svn.apache.org/repos/asf/tomcat/tags/JDBC_POOL_1_1_0_1/ > > Documentation > http://people.apache.org/~fhanik/jdbc-pool/jdbc-pool.html Top of t

Where do we stand with maven publishing?

2011-03-03 Thread Filip Hanik - Dev Lists
Where do we stand with publishing Tomcat jars/artifacts to a Maven repository. I see that the mvn-pub.xml has been updated, but I don't see where the source JARs are generated from. best Filip - To unsubscribe, e-mail: dev-un

Re: svn commit: r1076736 - in /tomcat/trunk/modules/jdbc-pool: build.properties.default build.xml sign.sh test/org/apache/tomcat/jdbc/test/Bug50571.java test/org/apache/tomcat/jdbc/test/Bug50805.java

2011-03-03 Thread Filip Hanik - Dev Lists
On 3/3/2011 1:25 PM, Konstantin Kolinko wrote: 2011/3/3: Author: fhanik Date: Thu Mar 3 19:20:38 2011 New Revision: 1076736 URL: http://svn.apache.org/viewvc?rev=1076736&view=rev Log: Add missing files and license header Add NOTICE/LICENSE to all JAR files Added: tomcat/trunk/modules/jdb

Re: Where do we stand with maven publishing?

2011-03-03 Thread Konstantin Kolinko
2011/3/4 Filip Hanik - Dev Lists : > Where do we stand with publishing Tomcat jars/artifacts to a Maven > repository. > I see that the mvn-pub.xml has been updated, but I don't see where the > source JARs are generated from. Are you talking about Tomcat 7? res/maven/mvn.properties.default has: #

Re: Where do we stand with maven publishing?

2011-03-03 Thread Filip Hanik - Dev Lists
On 3/3/2011 5:25 PM, Konstantin Kolinko wrote: 2011/3/4 Filip Hanik - Dev Lists: Where do we stand with publishing Tomcat jars/artifacts to a Maven repository. I see that the mvn-pub.xml has been updated, but I don't see where the source JARs are generated from. Are you talking about Tomcat 7?