Bonza job guys,
thank you :-)
Kevin Jones
DevelopMentor
www.develop.com
> -Original Message-
> From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]]
> Sent: 31 March 2001 08:27
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: [ANNOUNCE] T
I'm pleased to announce the availability of the Beta 2 release of the
next generation of the Tomcat servlet container, at:
http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-b2/
Tomcat 4.0 beta 2 has many new features, including:
* Tomcat 4.0 can now run web applications out of an
remm01/03/30 19:00:42
Modified:catalina/src/share/org/apache/naming/resources
FileDirContext.java
Log:
- Fix problems under Windows where doing a request on /examples/.. would
return a 500. Should now return a 404 instead.
Revision ChangesPa
craigmcc01/03/30 17:20:00
Modified:catalina/src/share/org/apache/catalina Globals.java
webapps/ROOT index.html
Log:
Update version numbers in preparation for beta 2 release.
Revision ChangesPath
1.20 +5 -5
jakarta-tomcat-4.0/catalina/src/share/o
I've been reviewing the new Server Side Include functionality that Bip
Thelin contributed, and comparing it to the NCSA docs at:
http://hoohoo.ncsa.uiuc.edu/docs/tutorials/includes.html
One place where our current behavior appears to vary from the
documentation is on whether virtual paths ar
craigmcc01/03/30 16:00:08
Modified:.RELEASE-NOTES-4.0-B2.txt
Log:
Update to reflect the version of Xerces that I tested with.
Revision ChangesPath
1.6 +2 -2 jakarta-tomcat-4.0/RELEASE-NOTES-4.0-B2.txt
Index: RELEASE-NOTES-4.0-B2.txt
craigmcc01/03/30 15:24:05
Modified:catalina/src/share/org/apache/catalina/core
LocalStrings.properties StandardContext.java
Log:
Correctly assume that reload will be successful unless an error is
encountered.
Revision ChangesPath
1.28 +2 -0
craigmcc01/03/30 15:23:19
Modified:catalina/src/share/org/apache/catalina/connector
HttpRequestBase.java
Log:
Reverse the order of testing (check aliases first, then real roles) to conform
to the servlet spec requirements.
Submitted by: Bill Claypool
craigmcc01/03/30 15:19:15
Modified:tester/src/tester/org/apache/tester Resources03.java
Log:
Close the input stream when we are done with it.
Revision ChangesPath
1.2 +2 -1
jakarta-tomcat-4.0/tester/src/tester/org/apache/tester/Resources03.java
Index: Re
On Fri, 30 Mar 2001, Bill Claypool wrote:
> On Fri, Mar 30, 2001 at 01:47:45PM -0800, Craig R. McClanahan wrote:
> " On Fri, 30 Mar 2001, Bill Claypool wrote:
> "
> " > On Mon, Mar 26, 2001 at 08:02:18PM -, [EMAIL PROTECTED] wrote:
> " > " craigmcc01/03/26 12:02:17
> " > "
> " > " M
Hi Tomcat developer/user community,
I am using Tomcat 3.2.1.
Did you notice any problem while forwarding from a Servlet/JSP to a target
JSP,which is a quite large in size? which may be something related to jsp
comilation could not be finished in a certain time/ is too big in size to occupy
run tim
craigmcc01/03/30 14:43:53
Modified:.RELEASE-NOTES-4.0-B2.txt
Log:
Reflect the bugfix that Justyna just checked in.
Revision ChangesPath
1.5 +4 -1 jakarta-tomcat-4.0/RELEASE-NOTES-4.0-B2.txt
Index: RELEASE-NOTES-4.0-B2.txt
===
craigmcc01/03/30 14:41:13
Modified:catalina/src/share/org/apache/catalina/core
LocalStrings.properties
Log:
Update message strings for the change to startup just checked in.
Revision ChangesPath
1.27 +2 -0
jakarta-tomcat-4.0/catalina/sr
craigmcc01/03/30 14:27:51
Modified:catalina/src/share/org/apache/catalina/core
StandardContext.java
Log:
Any significant error that is encountered while starting a Context initially,
or as part of a reload() call, will now cause the corresponding web
appl
horwat 01/03/30 14:26:37
Modified:jasper/src/share/org/apache/jasper/compiler
ParserXJspSaxHandler.java
Log:
Fix jsp xml syntax processing. Handle end tag properly.
Bugzilla #618
Revision ChangesPath
1.8 +4 -0
jakarta-tomcat-4.0
On Fri, 30 Mar 2001, GOMEZ Henri wrote:
> These question appeared some time ago and I think that Craig
> said it depend on OS where java is running and certainly JVM support
> on IPv6.
>
> Rigth question may be about JDK 1.3 support of IPv6 ?
>
On TOMCAT-USER, it was pointed out that Apache
On Fri, 30 Mar 2001, Hui Ye wrote:
>
> Hi, all,
>
> I downloaded latest catalina code off cvs and jakarta-servletapi-4.0-b1,
> along with other required stuff, and tried to compile and build it.
> However, there are class name and method mismatches between the two to
> prevent compiling going
On Fri, 30 Mar 2001, Bill Claypool wrote:
> On Mon, Mar 26, 2001 at 08:02:18PM -, [EMAIL PROTECTED] wrote:
> " craigmcc01/03/26 12:02:17
> "
> " Modified:catalina/src/share/org/apache/catalina/connector
> " HttpRequestBase.java
> " Log:
> " Correct the i
craigmcc01/03/30 13:42:52
Modified:.RELEASE-NOTES-4.0-B2.txt
Log:
Increase the visibility of the security vulnerabilities that were fixed, and
add information about the increased scope of the second vulnerability, beyond
what was originally reported.
Revision Chang
craigmcc01/03/30 13:38:48
Modified:catalina/src/share/org/apache/catalina/authenticator
AuthenticatorBase.java
Log:
Fix a further vulnerability related to the "may expose JSP source code"
vulnerability. Creative use of URL-encoded characters would also cau
These question appeared some time ago and I think that Craig
said it depend on OS where java is running and certainly JVM support
on IPv6.
Rigth question may be about JDK 1.3 support of IPv6 ?
>-Original Message-
>From: Ibrahim Haddad (LMC) [mailto:[EMAIL PROTECTED]]
>Sent: Friday, Marc
craigmcc01/03/30 13:23:25
Modified:.README.txt
Log:
Add a note about downloading JavaMail and the activation framework in order
to build the mail-related object factories.
Revision ChangesPath
1.15 +5 -0 jakarta-tomcat-4.0/README.txt
Index: READM
craigmcc01/03/30 13:20:05
Modified:tester/src/bin tester.xml
tester/web/WEB-INF web.xml
Added: tester/src/tester/org/apache/tester Decoding01.java
Log:
Add unit tests to validate URL decoding of getServletPath() and
getPathInfo() values.
Revision Chang
Title: Catalina Compiling error. class/method name mismatch between catalina classes reference calls and javax.servlet classes
Hi, all,
I downloaded latest catalina code off cvs and jakarta-servletapi-4.0-b1, along with other required stuff, and tried to compile and build it. However, ther
On Mon, Mar 26, 2001 at 08:02:18PM -, [EMAIL PROTECTED] wrote:
" craigmcc01/03/26 12:02:17
"
" Modified:catalina/src/share/org/apache/catalina/connector
" HttpRequestBase.java
" Log:
" Correct the implementation of HttpServletRequest.isUserInRole() so tha
+1
Justy
- Original Message -
> I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release
> tonight, based on the current CVS code base. The primary reason for the
> expedited schedule is that this code will include a fix for the "Tomcat
> may reveal script source code
Quoting "Cozianu, Costin" <[EMAIL PROTECTED]>:
> Hi there,
>
> I just wanted to report the same problem, apparently the situation is
> improved in 3.2.2beta 2 .
>
> What I had is that under 3.1 and 3.2.1 when stress loaded with 50
> concurrent
> users making request each second Tomcat leaked me
Hi there,
I just wanted to report the same problem, apparently the situation is
improved in 3.2.2beta 2 .
What I had is that under 3.1 and 3.2.1 when stress loaded with 50 concurrent
users making request each second Tomcat leaked memory.
It would easily go to OutOfMemoryError, although I tried t
craigmcc01/03/30 12:44:21
Modified:catalina/src/share/org/apache/catalina/core
StandardContextMapper.java
Log:
Use RequestUtil.URLDecode() instead of URLDecoder.decode() in order to
deal with character encoding issues correctly.
Submitted by: Remy Mauc
"Craig R. McClanahan" wrote:
>
> I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release
> tonight, based on the current CVS code base. The primary reason for the
> expedited schedule is that this code will include a fix for the "Tomcat
> may reveal script source code by URL t
craigmcc01/03/30 12:31:53
Modified:.RELEASE-NOTES-4.0-B2.txt
Log:
Update beta-2 release notes to reflect changes made to date.
Need to verify behavior of several of the new features (running Jasper using
Xerces 1.3, compression filter, and server-side includes) before
on 3/30/01 11:36 AM, "Craig R. McClanahan" <[EMAIL PROTECTED]> wrote:
> I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release
> tonight, based on the current CVS code base. The primary reason for the
> expedited schedule is that this code will include a fix for the "Tomcat
>
- Original Message -
From: "Craig R. McClanahan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 30, 2001 11:36 AM
Subject: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security
Vulnerability)
> I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release
On Fri, 30 Mar 2001, Marc Saegesser wrote:
> 1. Classes loaded by the container take precedence over classes from Jar
> files in WEB-INF/lib. In tomcat 3.x there really isn't anything we can do
> about this. The Servlet 2.3 (Proposed Final Draft) specification allows
> containers to let classe
> I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release
> tonight, based on the current CVS code base. The primary reason for the
> expedited schedule is that this code will include a fix for the "Tomcat
> may reveal script source code by URL trickery" security vulnerability,
> +relativeURI = URLDecoder.decode(relativeURI);
That doesn't decode using the right format. Maybe it works in that case, but
I suggest using RequestUtil.URLDecode instead.
Remy
I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release
tonight, based on the current CVS code base. The primary reason for the
expedited schedule is that this code will include a fix for the "Tomcat
may reveal script source code by URL trickery" security vulnerability, as
well
craigmcc01/03/30 11:33:39
Modified:catalina/src/share/org/apache/catalina/core
LocalStrings.properties StandardContextMapper.java
StandardContextValve.java StandardWrapperValve.java
catalina/src/share/org/apache/catalina/uti
Could you please try this test with Tomcat 3.2.2 beta 2? I believe this
problem has been fixed in this release.
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 30, 2001 1:08 PM
> To: [EMAIL PROTECTED]
> Subject: Stress Test problems with 3.
Ben,
Thanks for your feedback. I'll try to respond to your issues below. Also,
if at all possible, try using the Tomcat 3.2.2b2 release to see if it
addresses any of your concerns.
1. Classes loaded by the container take precedence over classes from Jar
files in WEB-INF/lib. In tomcat 3.x th
Hello,
I have tc 3.2.1 installed on w2k server with iis5, sun hotspot 2.0 server
mode and jdk 1.3. I have been running this implementation successfully for
the past several months with no problems. I decided to perform a stress
test to see how tc would handle it.
1. First test. 100 concurrent c
Tomcat 3.1.x and 3.2.x do not suffer from this problem.
> -Original Message-
> From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 30, 2001 12:26 PM
> To: [EMAIL PROTECTED]
> Subject: Re: FW: Tomcat may reveal script source code by URL trickery
>
>
>
>
> On Fri, 30
On Fri, 30 Mar 2001, Renzo Toma wrote:
>
> Just in case you missed it.
>
I'm working on this ... (compiling as I type).
Craig
> -Original Message-
> From: Bugtraq List [mailto:[EMAIL PROTECTED]]On Behalf Of Sverre
> H. Huseby
> Sent: donderdag 29 maart 2001 10:12
> To: [EMAIL PROT
Hi Craig,
I agree with you - bundling the javax.naming... is a bit of a problem waiting to
happen.
The original reason was as a 'convenience' for end-users that weren't on JDK 1.3,
as it was the
same classes from JSEE 1.2.1 there wasn't a conflict.
Of course who knows what the future will brin
Hi Tomcat Developers,
I work at Finetix London, a technical consultancy
working with a lot of J2EE and XML/XSL technology. Over the last weeks, my
colleage and I have been using Tomcat 3.2.1 for JSP/Servlet development, and we
encountered a couple of glitches/issues which I describe below.
Just in case you missed it.
-Original Message-
From: Bugtraq List [mailto:[EMAIL PROTECTED]]On Behalf Of Sverre
H. Huseby
Sent: donderdag 29 maart 2001 10:12
To: [EMAIL PROTECTED]
Subject: Tomcat may reveal script source code by URL trickery
Tomcat may reveal script source code by URL
Hi,
I'm just evaluating tomcat 4.0 b1 and apache 1.3.12 on a solaris 2.6 system.
After installing tomcat (as stand-alone) and successfully testing the examples, I tried to connect tomcat and apache using mod_webapp. This works also fine. But testing the session servlet example fails. It seems tha
You should run jspc with -webinc switch. It will generate an XML fragment
that you should add to your web.xml file (either by copy/paste or by
including it as an entity); It will look like this:
com.mycompany.foo.myjsppage
com.mycompany.foo.myjsppage
/com/mycompany/foo/
Hello,
I am working on IPv6 at Ericsson Research Canada. I would like
to check if Tomcat has support for IPv6 addressing format.
I would really appreciate your feedback.
Thank you.
--
Ibrahim Haddad
Open Architecture Research Lab
> I've just tried to compile the latest CVS of Tomcat 4 and I'm missing some
> classes trying to compile SendMailFactory.java.
>
> /Users/stuart/OpenSource/jakarta-tomcat-4.0/catalina/src/share/org/apache/
> naming/factory/SendMailFactory.java:0: Class javax.activation.DataSource
> not found in cl
On Fri, 30 Mar 2001, Stuart Roebuck wrote:
> I've just tried to compile the latest CVS of Tomcat 4 and I'm missing some
> classes trying to compile SendMailFactory.java.
>
> /Users/stuart/OpenSource/jakarta-tomcat-4.0/catalina/src/share/org/apache/
> naming/factory/SendMailFactory.java:0: Cla
On Fri, 30 Mar 2001, Matthew L Daniel wrote:
> I (personally) hate setting all those crazy environmental variables to build
> Catalina, and since Ant is kind enough to ignore the "property file" tag if
> the file does not exist, I feel this can be safely included for general use.
>
I've had p
On Thu, 29 Mar 2001, T. Park wrote:
> Remy,
>
> thanks, that's good to hear - I'm still having a nightmare of a time resolving
> one last issue.
>
> I have a large jar file that contains, amongst other things (e.g. an ejb
> container, a namingservice etc) javax.naming package.
>
Are you inc
On Fri, 30 Mar 2001, Mel Martinez wrote:
> I don't have the time to do much more than that! That
> Damn Day Job(tm) keeps getting in the way! :-)
Yea, believe me, I know what you mean, you're not the only one :-)
Costin
--- [EMAIL PROTECTED] wrote:
> On Fri, 30 Mar 2001, Mel Martinez wrote:
>
> > --- Steve Downey <[EMAIL PROTECTED]>
> wrote:
> >
> > I must admit to not being totally sure whether
> > co-opting the current 'Constants' and 'Options'
> class
> > families is the best naming for this, but they do
> >
On Fri, 30 Mar 2001, Mel Martinez wrote:
> --- Steve Downey <[EMAIL PROTECTED]> wrote:
>
> I must admit to not being totally sure whether
> co-opting the current 'Constants' and 'Options' class
> families is the best naming for this, but they do
> clearly indicate the difference in scope. I coul
--- Steve Downey <[EMAIL PROTECTED]> wrote:
> > -Original Message-
> > From: [EMAIL PROTECTED]
> >
> > On Thu, 29 Mar 2001, Mel Martinez wrote:
> >
> > > activities that should be orthogonal. The only
> > > dependency should be that the Compiler is a
> consumer
> > > of the products of
It's one of the alternate names for Abstract Factory, from the GoF book. AKA
toolkit.
The idea is that you have a an abstract class with methods such as
createThing1 and createThing2, which return abstract Thing1s and Thing2s. A
concrete implementation of the factory, xFactory, returns an xThin
I've just tried to compile the latest CVS of Tomcat 4 and I'm missing some
classes trying to compile SendMailFactory.java.
/Users/stuart/OpenSource/jakarta-tomcat-4.0/catalina/src/share/org/apache/
naming/factory/SendMailFactory.java:0: Class javax.activation.DataSource
not found in class javax
59 matches
Mail list logo