Re: BZ 66294 - optionally disable some SecurityManager checks

On 09/11/2022 00:25, Christopher Schultz wrote: Mark, On 11/8/22 12:36, Mark Thomas wrote: On 08/11/2022 16:47, Christopher Schultz wrote: Mark, On 11/7/22 16:53, Mark Thomas wrote: On 07/11/2022 21:08, Christopher Schultz wrote: Mark, On 11/7/22 11:24, Mark Thomas wrote: Hi, BZ 66294 [1

Re: [tomcat] branch main updated: Fix BZ 66294. Make use of privileged block optional. Performance hotspot

On 09/11/2022 00:28, Christopher Schultz wrote: Mark, On 11/8/22 12:41, Mark Thomas wrote: On 08/11/2022 16:52, Christopher Schultz wrote: Mark, Wouldn't it be "safer" to have this doPrivileged be an "opt-out" permission rather than an "opt-in" permission? Good question. Nobody is going t

[tomcat] branch main updated: Avoid invalid JSON in JSONErrorReportValve output

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 6a0ac6a438 Avoid invalid JSON in JSONErrorReportValve

[tomcat] branch 10.1.x updated: Avoid invalid JSON in JSONErrorReportValve output

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 1f50bff8da Avoid invalid JSON in JSONErrorReportV

[tomcat] branch 9.0.x updated: Avoid invalid JSON in JSONErrorReportValve output

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new b336f4e588 Avoid invalid JSON in JSONErrorReportVal

[tomcat] branch 8.5.x updated: Avoid invalid JSON in JSONErrorReportValve output

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 0cab3a56bd Avoid invalid JSON in JSONErrorReportVal

[tomcat] tag 10.1.2 created (now 153506ba8a)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to tag 10.1.2 in repository https://gitbox.apache.org/repos/asf/tomcat.git at 153506ba8a (commit) This tag includes the following new commits: new 153506ba8a Tag 10.1.2 The 1 revisions listed a

[tomcat] 01/01: Tag 10.1.2

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to tag 10.1.2 in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 153506ba8aaabbafbf75b9084f5869e02f35facc Author: Mark Thomas AuthorDate: Wed Nov 9 15:58:59 2022 + Tag 10.1.2 ---

HTTP workshop

Hi all, Last week I attended the 2022 HTTP workshop [1]. There was lots of interesting discussion and I thought it was worth highlighting the key things relevant to Tomcat. 1. Draft updates to RFC 6265 Cookies [2]. Most changes don't impact Tomcat. However, it clarifies that quotes are

svn commit: r57922 - in /dev/tomcat/tomcat-10/v10.1.2: ./ bin/ bin/embed/ src/

Author: markt Date: Wed Nov 9 17:10:17 2022 New Revision: 57922 Log: Upload 10.1.2 for voting Added: dev/tomcat/tomcat-10/v10.1.2/ dev/tomcat/tomcat-10/v10.1.2/KEYS dev/tomcat/tomcat-10/v10.1.2/README.html dev/tomcat/tomcat-10/v10.1.2/RELEASE-NOTES dev/tomcat/tomcat-10/v10.1.

[tomcat] branch 10.1.x updated: Increment version for next dev cycle

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new cfb16d2055 Increment version for next dev cycle c

[VOTE] Release Apache Tomcat 10.1.2

The proposed Apache Tomcat 10.1.2 release is now available for voting. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will au

[GitHub] [tomcat] Naturbelassen opened a new pull request, #565: updated link to download cvs

Naturbelassen opened a new pull request, #565: URL: https://github.com/apache/tomcat/pull/565 The documentation suggest to get cvs by following this link: http://www.cvshome.org/ However the linked page has nothing to do with csv. -- This is an automated message from the Apache G

[tomcat] tag 9.0.69 created (now cd5fd93c5d)

This is an automated email from the ASF dual-hosted git repository. remm pushed a change to tag 9.0.69 in repository https://gitbox.apache.org/repos/asf/tomcat.git at cd5fd93c5d (commit) This tag includes the following new commits: new cd5fd93c5d Tag 9.0.69 The 1 revisions listed ab

[tomcat] 01/01: Tag 9.0.69

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to tag 9.0.69 in repository https://gitbox.apache.org/repos/asf/tomcat.git commit cd5fd93c5df3699868ec39731f5a347450112299 Author: remm AuthorDate: Wed Nov 9 19:50:15 2022 +0100 Tag 9.0.69 --- build.pr

svn commit: r57925 - in /dev/tomcat/tomcat-9/v9.0.69: ./ bin/ bin/embed/ src/

Author: remm Date: Wed Nov 9 18:53:58 2022 New Revision: 57925 Log: Upload 9.0.69 for voting Added: dev/tomcat/tomcat-9/v9.0.69/ dev/tomcat/tomcat-9/v9.0.69/KEYS dev/tomcat/tomcat-9/v9.0.69/README.html dev/tomcat/tomcat-9/v9.0.69/RELEASE-NOTES dev/tomcat/tomcat-9/v9.0.69/bin/

[tomcat] branch 9.0.x updated: Increment version for next dev cycle

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new bba4c45fe1 Increment version for next dev cycle bba4

[VOTE] Release Apache Tomcat 9.0.69

The proposed Apache Tomcat 9.0.69 release is now available for voting. The notable changes compared to 9.0.68 are: - Fix concurrency issue in evaluation of expression language containing lambda expressions. - Update the packaged version of the Apache Tomcat Native Library to 2.0.2 to pick

[GitHub] [tomcat] aooohan commented on pull request #565: updated link to download cvs

aooohan commented on PR #565: URL: https://github.com/apache/tomcat/pull/565#issuecomment-1309666942 Thanks for bringing it to my attention. But CSV is too old and outdated and I think it's time to use Git instead. So I will try to change some docs related to this. -- This is an automate

[GitHub] [tomcat-training] dependabot[bot] opened a new pull request, #9: Bump socket.io-parser from 2.3.1 to 3.3.3

dependabot[bot] opened a new pull request, #9: URL: https://github.com/apache/tomcat-training/pull/9 Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 2.3.1 to 3.3.3. Release notes Sourced from https://github.com/socketio/socket.io-parser/releases";>socket

[tomcat-training] branch dependabot/npm_and_yarn/socket.io-parser-3.3.3 created (now e1fa056)

This is an automated email from the ASF dual-hosted git repository. github-bot pushed a change to branch dependabot/npm_and_yarn/socket.io-parser-3.3.3 in repository https://gitbox.apache.org/repos/asf/tomcat-training.git at e1fa056 Bump socket.io-parser from 2.3.1 to 3.3.3 No new revis

[GitHub] [tomcat-training] dependabot[bot] commented on pull request #8: Bump socket.io-parser from 2.3.1 to 3.3.2

dependabot[bot] commented on PR #8: URL: https://github.com/apache/tomcat-training/pull/8#issuecomment-1309683026 Superseded by #9. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific co

[GitHub] [tomcat-training] dependabot[bot] closed pull request #8: Bump socket.io-parser from 2.3.1 to 3.3.2

dependabot[bot] closed pull request #8: Bump socket.io-parser from 2.3.1 to 3.3.2 URL: https://github.com/apache/tomcat-training/pull/8 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific c

Re: [VOTE] Release Apache Tomcat 10.1.2

> 2022年11月10日 01:32，Mark Thomas 写道： > > The proposed Apache Tomcat 10.1.2 release is now available for > voting. > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 > without changes. Java EE applications designed for Tomcat 9 and earlier may > be placed in the $CATA