Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.

Costin Manolache wrote: > > Regarding feedback on patch - I think I expressed my concerns: > - more analysis and understanding of security implications > - if possible to do it at a different (higher) level > - if it can be done in a modular fashion, i.e. keeping the default impl the > way it is,

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java

Filip Hanik - Dev Lists wrote: > > > I'll vote +1 for bringing trunk back any time when I see > > your TODO list. Sorry but without that Tomcat6 is not Tomact6 > > but rather your personal (and anyone else) playground. > bummer, I guess you never saw this > http://marc.info/?l=tomcat-dev&m=1186461

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Mladen Turk wrote: Filip Hanik - Dev Lists wrote: Mladen Turk wrote: This simply has to stop. taking trunk away, this turn of events is expected. I wish everyone would have thought of that before we got caught up in the personal, and not what is important, trunk debate. I did, as well

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.

As everyone will see ... I reverted. Its not the end of the world if this gets in since I can easily maintain a private version with alias support for myself. I thought it was a helpful bloatage for others. It might be worthwhile keeping the discussion active for the moment if anyone else has o

svn commit: r575945 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Author: funkman Date: Sat Sep 15 10:42:01 2007 New Revision: 575945 URL: http://svn.apache.org/viewvc?rev=575945&view=rev Log: undo 575332 (alias support) due to 2 vetos Modified: tomcat/tc6.0.x/trunk/java/org/apache/naming/resources/FileDirContext.java tomcat/tc6.0.x/trunk/webapps/docs/

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.

On 9/15/07, Jim Jagielski <[EMAIL PROTECTED]> wrote: > > Costin Manolache wrote: > > > > Well, regarding the veto - it's simple. I second Remy's opinion that the > > veto is valid > > and the change is not right at the moment, and I guess that should > close > > this discussion. > > > > The discus

DO NOT REPLY [Bug 43366] - Session Statistics command in manager fails with "Unknown command /sessions"

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.

Costin Manolache wrote: > > Well, regarding the veto - it's simple. I second Remy's opinion that the > veto is valid > and the change is not right at the moment, and I guess that should close > this discussion. > > The discussion about whether to add such a feature or not - I think a simple > vo

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Well, regarding the veto - it's simple. I second Remy's opinion that the veto is valid and the change is not right at the moment, and I guess that should close this discussion. The discussion about whether to add such a feature or not - I think a simple vote would solve this as well, it's quite a

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Filip Hanik - Dev Lists wrote: Mladen Turk wrote: This simply has to stop. taking trunk away, this turn of events is expected. I wish everyone would have thought of that before we got caught up in the personal, and not what is important, trunk debate. I did, as well others did (I hope)

DO NOT REPLY [Bug 43366] - Session Statistics command in manager fails with "Unknown command /sessions"

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Mladen Turk wrote: Bill Barker wrote: Now, I'd prefer that TC is just the Servlet/JSP container that it is meant to be, and not try to add on proprietary features. But that is just me ;). You are not the only one ;) Seems we have lost the clear vision of the project somewhere in the flam

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Remy Maucherat wrote: I tested with the security manager, and it doesn't behave correctly. If the context.xml inside a webapp is: The docBase hack attempt doesn't do anything (it's overwritten, I think), but the security manager does not prevent browsing the HD as the policy grants all p

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Remy Maucherat wrote: > Tim Funk wrote: >> 2) If a deploy tool is used which is doing checks - adding an extra >> check to allow/deny/restrict scope should not be too hard to do. Since >> users can disable symlink checks in the same class (FileDirContext) - >> the same exposure could be had with a

DO NOT REPLY [Bug 43366] - Session Statistics command in manager fails with "Unknown command /sessions"

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: [PATCH] jasper - enum support for tag libs

David Blevins wrote: On Sep 14, 2007, at 10:34 AM, Filip Hanik - Dev Lists wrote: - adding methods or altering the signature of the javax. APIs is clearly illegal yes, that would not be spec compliant, that's essentially what spec compliant means, that we pass the signature test (which we hav

Re: svn commit: r575332 - in /tomcat/tc6.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Tim Funk wrote: 2) If a deploy tool is used which is doing checks - adding an extra check to allow/deny/restrict scope should not be too hard to do. Since users can disable symlink checks in the same class (FileDirContext) - the same exposure could be had with a little more effort. I'm not tr

DO NOT REPLY [Bug 43338] - Setting '*' as the servlet-name in filter-mapping causes IllegalArgumentException.

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

svn commit: r575890 - in /tomcat/tc6.0.x/trunk: java/org/apache/catalina/core/StandardContext.java webapps/docs/changelog.xml

Author: pero Date: Sat Sep 15 00:55:42 2007 New Revision: 575890 URL: http://svn.apache.org/viewvc?rev=575890&view=rev Log: SRV 6.2.5 says supporting for '*' as the servlet-name in filter-mapping. SampleFilter * Modified: tomcat/tc6.0.x/trunk/java/org/apache/catalina