Hello,
We are currently fighting with the tomcat update from v7.0.99 to v7.0.100. Since there are open security issues in v7.0.99 we are forced to do it promptly, however I have the feeling that we detected a major issue in v7.0.100. We have a Faces-Application, based on org=”org.glassfish" name="javax.faces" rev="2.3.9”. It seems that v7.0.100 does not load the FacesInitializer, declared in /META-INF/services/javax.servlet.ServletContainerInitializer, whereas v7.0.99 does. The FacesInitializer initializes, e.g. classes annotated with @FacesConverter or @FacesValidator, which won’t be available any more. It seems related with the following entries in the changelog: <https://bz.apache.org/bugzilla/show_bug.cgi?id=64021> 64021: Ensure that container provided SCIs are always loaded before application provided SCIs. Note that where both the container and the application provide the same SCI, it is the application provided SCI that will be used. (markt) SCI definitions from JARs unpacked into WEB-INF/classes are now handled consistently and will always be found irrespective of whether the web application defines a JAR ordering or not. (markt) Our current workaround is, to copy the file /META-INF/services/javax.servlet.ServletContainerInitializer Into the WEB-INF/classes – Folder. Before filing this as a Bug Report, I would like to post it in this forum to get feedback. To demonstrate the issue, I provided a simple demonstration war-Project via a temporary download link: http://server.arctis.at/tmp/ProblemDemoProject.war Depending on your installation, the call to https://localhost:8443/ProblemDemoProject/ should return in v7.0.99 something like Startvalue: Hello World Converted value: HELLO WORLD (converted by DemoConverter With v7.0.100 it returns An Error Occurred: Ausdrucksfehler: Benanntes Objekt demoConverter nicht gefunden. (sorry German localization: should read expression error: named object demoConverter not found) … 04.03.2020 08:51:07 - Generated by Mojarra/Facelets Feedback welcome. As an addendum: Meanwhile I have detected <https://bz.apache.org/bugzilla/show_bug.cgi?id=64191> https://bz.apache.org/bugzilla/show_bug.cgi?id=64191 . I’m pretty sure that the problem is related with it. Just use my demo web application for an regression test 😊. Michael Dr. Michael Breu michael.b...@arctis.at <mailto:michael.b...@qe-lab.com> Tel. +43 676 3439918 arctis Softwaretechnologie GmbH, GF. Dr. Michael Breu 6401 Inzing, Jägerweg 2 Firmenbuch FN 230395 t
