The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.67.
Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. This release contains a number of bug fixes and improvements compared to version 7.0.65. The notable changes since 7.0.65 include: - Allow file based configuration resources (e.g. key stores) to be configured using URLs. - Add an option to control (per context) quoting of EL expressions in JSP attributes. Restore the default behavior in Jasper to align with 7.0.64 and earlier as well as other JSP implementations. - Add a new RestCsrfPreventionFilter that provides basic CSRF protection for REST APIs. - Use instance manager for WebSocket server endpoint instances. - Location headers for redirects now use relative URIs. This can be controlled per Context with the useRelativeRedirects attribute. Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-7.0-doc/changelog.html Note: This version has 4 zip binaries: a generic one and three bundled with Tomcat native binaries for Windows operating systems running on different CPU architectures. Note: Use of the Java WebSocket 1.1 implementation requires Java 7. Note: If you use the APR/native AJP or HTTP connector you *must* upgrade to version 1.1.33 or later of the APR/native library. Downloads: http://tomcat.apache.org/download-70.cgi Migration guides from Apache Tomcat 5.5.x and 6.0.x: http://tomcat.apache.org/migration.html Enjoy The Apache Tomcat team