The proposed Apache Tomcat 11.0.25 release is now available for voting.
The notable changes compared to 11.0.24 include:
- Add a new attribute to the Context, urlPatternsProvidedInDecodedForm.
This attribute controls whether URLs and URL patterns provided in the
deployment descriptor (web.xml), annotations and/or their programmatic
equivalents are treated as being provided in URL-encoded form (i.e.
using %nn encoding) or in decoded form. The Servlet specification
requires that they are provided in decoded form. However, Tomcat has
historically treated them as if they are provided in encoded form. In
Tomcat 12, they will always be treated as if they are provided in
decoded form. This setting enables migration from encoded form to
decoded form on an application by application basis. This attribute
will be removed in Tomcat 12 where it will effectively be hard-coded
to true.
- Require every HTTP/2 request to provide an authority (either an
:authority pseudo header or a Host header)
- Change the default encryptionAlgorithm for the EncryptInterceptor to
AES/GCM/NoPadding. This is a breaking change for the
EncryptInterceptor.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.25/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1600
The tag is:
https://github.com/apache/tomcat/tree/11.0.25
cbe6e15ee81e2fc6232954292a80cca5d1e84009
The proposed 11.0.25 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.25
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
