Re: [PR] Csrf filter improvements [tomcat]

2023-12-20 Thread via GitHub
ChristopherSchultz commented on PR #681: URL: https://github.com/apache/tomcat/pull/681#issuecomment-1864828084 > 1. There are case-insensitive file systems out there... I wonder whether those default extensions should be treated case-insensitively. (If one is serving a web site from an

Re: [PR] Csrf filter improvements [tomcat]

2023-12-20 Thread via GitHub
kkolinko commented on PR #681: URL: https://github.com/apache/tomcat/pull/681#issuecomment-1864808958 1. There are case-insensitive file systems out there... I wonder whether those default extensions should be treated case-insensitively. (If one is serving a web site from an USB stick or a

Re: [PR] Csrf filter improvements [tomcat]

2023-12-20 Thread via GitHub
ChristopherSchultz commented on PR #681: URL: https://github.com/apache/tomcat/pull/681#issuecomment-1864951885 > Re 4: I think that if one is wise enough to write a RegExp, they could use "|" to combine several patterns, and do not really need splitting by comma. Or do you envision a use

Re: [PR] Csrf filter improvements [tomcat]

2023-12-20 Thread via GitHub
michael-o commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1433225531 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -198,15 +416,27 @@ protected boolean skipNonceCheck(HttpServletRequest request) {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434514917 ## webapps/docs/config/filter.xml: ## @@ -291,6 +291,13 @@ request. The default value is 403. + +A flag to enable or disable

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
michael-o commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434524088 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -87,11 +104,170 @@ public void setNonceRequestParameterName(String parameterName) {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434511388 ## webapps/docs/config/filter.xml: ## @@ -319,6 +326,34 @@ of java.security.SecureRandom will be used. + +A list of URL

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
michael-o commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434513367 ## webapps/docs/config/filter.xml: ## @@ -319,6 +326,34 @@ of java.security.SecureRandom will be used. + +A list of URL patterns that

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
michael-o commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434512783 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -198,15 +416,27 @@ protected boolean skipNonceCheck(HttpServletRequest request) {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434521612 ## webapps/docs/config/filter.xml: ## @@ -319,6 +326,34 @@ of java.security.SecureRandom will be used. + +A list of URL

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434510673 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -198,15 +416,27 @@ protected boolean skipNonceCheck(HttpServletRequest request) {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-21 Thread via GitHub
michael-o commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1434518590 ## webapps/docs/config/filter.xml: ## @@ -291,6 +291,13 @@ request. The default value is 403. + +A flag to enable or disable

Re: [I] How can I know the migrated jar is actually "touched" or not after running MigrationCLI [tomcat-jakartaee-migration]

2023-12-11 Thread via GitHub
zoumuzou commented on issue #51: URL: https://github.com/apache/tomcat-jakartaee-migration/issues/51#issuecomment-1851193071 OK, thanks a lot! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

[PR] Bump org.apache.tomcat:tomcat-catalina from 10.1.15 to 10.1.16 in /modules/owb [tomcat]

2023-12-10 Thread via GitHub
dependabot[bot] opened a new pull request, #680: URL: https://github.com/apache/tomcat/pull/680 Bumps org.apache.tomcat:tomcat-catalina from 10.1.15 to 10.1.16. [![Dependabot compatibility

Re: [PR] Csrf filter improvements [tomcat]

2024-01-03 Thread via GitHub
ChristopherSchultz commented on PR #681: URL: https://github.com/apache/tomcat/pull/681#issuecomment-1875476100 > > Re 4: I think that if one is wise enough to write a RegExp, they could use "|" to combine several patterns, and do not really need splitting by comma. > > I suppose if

[PR] Fix HTTP/2 support wording in HTTP docs [tomcat]

2024-01-06 Thread via GitHub
janbrasna opened a new pull request, #682: URL: https://github.com/apache/tomcat/pull/682 Trivial wording fix for config docs. _(Unfortunately goes all the way back to `9.0.x` and `8.5.x`)_ -- This is an automated message from the Apache Git Service. To respond to the message,

Re: [PR] Fix websocket processor leaks when WsSession expires and server send … [tomcat]

2024-01-06 Thread via GitHub
lbliangbin closed pull request #683: Fix websocket processor leaks when WsSession expires and server send … URL: https://github.com/apache/tomcat/pull/683 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[PR] Remove org.apache.catalina.ssi from tomcat-embed-core.jar.tmp.bnd [tomcat]

2024-01-13 Thread via GitHub
jjohannes opened a new pull request, #684: URL: https://github.com/apache/tomcat/pull/684 This package no longer exits in `tomcat-embed-core.jar`. It is in the 'module-info.class' of the current `10.1.18` and earlier `10.x` releases. Running `jlink` or `jpackage` with a Module Path

Re: [PR] Remove org.apache.catalina.ssi from tomcat-embed-core.jar.tmp.bnd [tomcat]

2024-01-15 Thread via GitHub
markt-asf commented on PR #684: URL: https://github.com/apache/tomcat/pull/684#issuecomment-1891608646 Fixed manually in main for 11.0.x (with change log entry) and then back-ported (cherry-picked) to 10.1.x and 9.0.x. -- This is an automated message from the Apache Git Service. To

Re: [PR] Remove org.apache.catalina.ssi from tomcat-embed-core.jar.tmp.bnd [tomcat]

2024-01-15 Thread via GitHub
markt-asf closed pull request #684: Remove org.apache.catalina.ssi from tomcat-embed-core.jar.tmp.bnd URL: https://github.com/apache/tomcat/pull/684 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

Re: [PR] Remove org.apache.catalina.ssi from tomcat-embed-core.jar.tmp.bnd [tomcat]

2024-01-15 Thread via GitHub
jjohannes commented on PR #684: URL: https://github.com/apache/tomcat/pull/684#issuecomment-1891752142 Thanks @markt-asf! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment.

[PR] Update README.md [tomcat-tck]

2024-01-16 Thread via GitHub
fhanik opened a new pull request, #1: URL: https://github.com/apache/tomcat-tck/pull/1 Fix header typo -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe,

Re: [PR] Bump org.apache.tomcat:tomcat-catalina from 10.1.15 to 10.1.16 in /modules/owb [tomcat]

2024-01-16 Thread via GitHub
markt-asf closed pull request #680: Bump org.apache.tomcat:tomcat-catalina from 10.1.15 to 10.1.16 in /modules/owb URL: https://github.com/apache/tomcat/pull/680 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

Re: [PR] Bump org.apache.tomcat:tomcat-catalina from 10.1.15 to 10.1.16 in /modules/owb [tomcat]

2024-01-16 Thread via GitHub
markt-asf commented on PR #680: URL: https://github.com/apache/tomcat/pull/680#issuecomment-1893441250 Out of date -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

Re: [PR] Bump org.apache.tomcat:tomcat-catalina from 10.1.15 to 10.1.16 in /modules/owb [tomcat]

2024-01-16 Thread via GitHub
dependabot[bot] commented on PR #680: URL: https://github.com/apache/tomcat/pull/680#issuecomment-1893441318 OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
markt-asf commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-1898853883 Thanks. The reference to the description on the users list helps. I'll look at this again. -- This is an automated message from the Apache Git Service. To respond to the message, please

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
imario42 commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-1898787616 @markt-asf : He described his findings in that tomcat-user post [https://lists.apache.org/thread/vyog0dyxwq3hlpjgt2vb1wkrxw6x2h1k](url) However, I do not know if his patch works.

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
markt-asf commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-189414 The description of the problem and the analysis of the root cause (the BZ 66508 fix) is correct but the proposed fix is not. It will probably work the majority of the time but there is a

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
markt-asf commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-1898765701 No evidence provided to support claim of a leak. No leak observed when testing with profiler. No obvious reason that proposed patch would impact `UpgradeProcessor` instances (or

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
markt-asf closed pull request #683: Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread URL: https://github.com/apache/tomcat/pull/683 -- This is an automated message from the Apache Git Service. To respond to the message, please log on

Re: [PR] Fix HTTP/2 support wording in HTTP docs [tomcat]

2024-01-18 Thread via GitHub
markt-asf commented on PR #682: URL: https://github.com/apache/tomcat/pull/682#issuecomment-1899075283 Tx. I'll back-port this fix shortly. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
markt-asf commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-1899074074 Fixed and back-ported. Will be in the February releases. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

Re: [PR] Fix HTTP/2 support wording in HTTP docs [tomcat]

2024-01-18 Thread via GitHub
markt-asf merged PR #682: URL: https://github.com/apache/tomcat/pull/682 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-01-18 Thread via GitHub
markt-asf closed pull request #683: Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread URL: https://github.com/apache/tomcat/pull/683 -- This is an automated message from the Apache Git Service. To respond to the message, please log on

Re: [PR] Csrf filter improvements [tomcat]

2023-12-19 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1431610887 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -53,6 +58,25 @@ public class CsrfPreventionFilter extends CsrfPreventionFilterBase {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-19 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1431612056 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -53,6 +58,25 @@ public class CsrfPreventionFilter extends CsrfPreventionFilterBase {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-19 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1431615348 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -53,6 +58,25 @@ public class CsrfPreventionFilter extends CsrfPreventionFilterBase {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-19 Thread via GitHub
ChristopherSchultz commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1431618064 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -53,6 +58,25 @@ public class CsrfPreventionFilter extends CsrfPreventionFilterBase {

Re: [PR] Csrf filter improvements [tomcat]

2023-12-25 Thread via GitHub
michael-o commented on code in PR #681: URL: https://github.com/apache/tomcat/pull/681#discussion_r1436107052 ## java/org/apache/catalina/filters/CsrfPreventionFilter.java: ## @@ -87,11 +104,170 @@ public void setNonceRequestParameterName(String parameterName) {

[PR] Update README.md [tomcat]

2023-11-29 Thread via GitHub
BTrees opened a new pull request, #679: URL: https://github.com/apache/tomcat/pull/679 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] Update README.md [tomcat]

2023-11-29 Thread via GitHub
aooohan closed pull request #679: Update README.md URL: https://github.com/apache/tomcat/pull/679 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] PDS-4683 upgrade tomcat for security reasons [tomcat-maven-plugin]

2023-12-04 Thread via GitHub
glendagonzales closed pull request #42: PDS-4683 upgrade tomcat for security reasons URL: https://github.com/apache/tomcat-maven-plugin/pull/42 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] Update to use JakartaExpressionLanguage osgi.contract [tomcat]

2024-01-25 Thread via GitHub
markt-asf commented on PR #685: URL: https://github.com/apache/tomcat/pull/685#issuecomment-1910670058 Thanks for reporting this. Looks like most of the embedded JARs got missed but EL was updated for embedded but not the standalone JAR in BZ 66834. I have a fix I'll push shortly that

Re: [PR] Update to use JakartaExpressionLanguage osgi.contract [tomcat]

2024-01-25 Thread via GitHub
markt-asf closed pull request #685: Update to use JakartaExpressionLanguage osgi.contract URL: https://github.com/apache/tomcat/pull/685 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific

Re: [PR] Update to use JakartaExpressionLanguage osgi.contract [tomcat]

2024-01-25 Thread via GitHub
markt-asf commented on PR #685: URL: https://github.com/apache/tomcat/pull/685#issuecomment-1910685730 Broader fix applied. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment.

Re: [I] Workaround for JDK-8303866 makes migrated jar incompatible with latest JDK releases [tomcat-jakartaee-migration]

2024-01-28 Thread via GitHub
DanielThomas commented on issue #48: URL: https://github.com/apache/tomcat-jakartaee-migration/issues/48#issuecomment-1913758414 Some improvements got made to this mitigation in later JDK releases, due to false positives in the detection, so I think this has been addressed upstream. --

Re: [PR] Csrf filter improvements [tomcat]

2024-02-01 Thread via GitHub
ChristopherSchultz merged PR #681: URL: https://github.com/apache/tomcat/pull/681 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-02-01 Thread via GitHub
chenbiaoit commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-1923029828 > Fixed and back-ported. Will be in the February releases. Hi @markt-asf,What channel can I use to know that this problem has been fixed? Thank you very much. -- This is an

Re: [PR] Fix websocket processor leaks when WsSession expires and server sends close message by WsBackgroundThread [tomcat]

2024-02-02 Thread via GitHub
ChristopherSchultz commented on PR #683: URL: https://github.com/apache/tomcat/pull/683#issuecomment-1924044806 > > Fixed and back-ported. Will be in the February releases. > > Hi @markt-asf,What channel can I use to know that this problem has been fixed? Thank you very much.

[PR] Update to use JakartaExpressionLanguage osgi.contract [tomcat]

2024-01-19 Thread via GitHub
pnicolucci opened a new pull request, #685: URL: https://github.com/apache/tomcat/pull/685 I opened: https://bz.apache.org/bugzilla/show_bug.cgi?id=66834 last year and upon looking at the latest M16 release of Expression Language 6.0 here:

Re: [PR] Add support for RequestBoudaries in DBCP [tomcat]

2023-11-19 Thread via GitHub
aooohan commented on PR #678: URL: https://github.com/apache/tomcat/pull/678#issuecomment-1818083370 This is an internal fork project which not belong to Tomcat. You should move this change to [Apache Commons DBCP](https://github.com/apache/commons-dbcp). -- This is an automated message

Re: [PR] Add support for RequestBoudaries in DBCP [tomcat]

2023-11-19 Thread via GitHub
aooohan closed pull request #678: Add support for RequestBoudaries in DBCP URL: https://github.com/apache/tomcat/pull/678 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

Re: [PR] Making sure that stop is not "blocked" by the check() in HostConfig [tomcat]

2023-11-20 Thread via GitHub
jfclere closed pull request #641: Making sure that stop is not "blocked" by the check() in HostConfig URL: https://github.com/apache/tomcat/pull/641 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

Re: [PR] Making sure that stop is not "blocked" by the check() in HostConfig [tomcat]

2023-11-20 Thread via GitHub
jfclere commented on PR #641: URL: https://github.com/apache/tomcat/pull/641#issuecomment-1819080600 See https://github.com/apache/tomcat/commit/dce1fc833b5192ec0ccee7d4120a050cee5da8de the exceptions are gone but now the stop() is blocked by the check(String name) but the fix is easy

Re: [PR] #49 support ear file type as archive file [tomcat-jakartaee-migration]

2023-11-17 Thread via GitHub
markt-asf merged PR #50: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/50 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[PR] Add support for RequestBoudaries in DBCP [tomcat]

2023-11-17 Thread via GitHub
meedbek opened a new pull request, #678: URL: https://github.com/apache/tomcat/pull/678 JDBC 4.3 introduced `beginRequest` and `endRequest` methods for connection pools which are called to mark request boundaries. `beginRequest` should be called when borrowing a connection and

Re: [PR] Added option to use custom SSLContext [tomcat]

2023-11-17 Thread via GitHub
KoteswararaoGundapaneni commented on PR #673: URL: https://github.com/apache/tomcat/pull/673#issuecomment-1816164863 Requesting to panel the change request to be considering and request has been taken care by the process that's done above -- This is an automated message from the Apache

Re: [PR] Add support for RequestBoudaries in DBCP [tomcat]

2023-11-17 Thread via GitHub
KoteswararaoGundapaneni commented on PR #678: URL: https://github.com/apache/tomcat/pull/678#issuecomment-1817334170 Hi Meedbek Please allow to work on this for offline to assist -- This is an automated message from the Apache Git Service. To respond to the message, please log on to

Re: [PR] Add support for RequestBoudaries in DBCP [tomcat]

2023-11-17 Thread via GitHub
KoteswararaoGundapaneni commented on PR #678: URL: https://github.com/apache/tomcat/pull/678#issuecomment-1817359611 still there is no presence of beginRequest in our code when i checked in dbcp -- This is an automated message from the Apache Git Service. To respond to the message, please

Re: [PR] Bump derby from 10.4.2.0 to 10.14.2.0 in /standard-examples [tomcat-taglibs-standard]

2023-11-20 Thread via GitHub
dependabot[bot] closed pull request #2: Bump derby from 10.4.2.0 to 10.14.2.0 in /standard-examples URL: https://github.com/apache/tomcat-taglibs-standard/pull/2 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[PR] Bump org.apache.derby:derby from 10.4.2.0 to 10.17.1.0 in /standard-test [tomcat-taglibs-standard]

2023-11-20 Thread via GitHub
dependabot[bot] opened a new pull request, #9: URL: https://github.com/apache/tomcat-taglibs-standard/pull/9 Bumps org.apache.derby:derby from 10.4.2.0 to 10.17.1.0. [![Dependabot compatibility

[PR] Bump org.apache.derby:derby from 10.4.2.0 to 10.17.1.0 in /standard-examples [tomcat-taglibs-standard]

2023-11-20 Thread via GitHub
dependabot[bot] opened a new pull request, #8: URL: https://github.com/apache/tomcat-taglibs-standard/pull/8 Bumps org.apache.derby:derby from 10.4.2.0 to 10.17.1.0. [![Dependabot compatibility

Re: [PR] Bump derby from 10.4.2.0 to 10.14.2.0 in /standard-examples [tomcat-taglibs-standard]

2023-11-20 Thread via GitHub
dependabot[bot] commented on PR #2: URL: https://github.com/apache/tomcat-taglibs-standard/pull/2#issuecomment-1819973208 Superseded by #8. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] Bump derby from 10.4.2.0 to 10.14.2.0 in /standard-test [tomcat-taglibs-standard]

2023-11-20 Thread via GitHub
dependabot[bot] closed pull request #3: Bump derby from 10.4.2.0 to 10.14.2.0 in /standard-test URL: https://github.com/apache/tomcat-taglibs-standard/pull/3 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

Re: [PR] Bump derby from 10.4.2.0 to 10.14.2.0 in /standard-test [tomcat-taglibs-standard]

2023-11-20 Thread via GitHub
dependabot[bot] commented on PR #3: URL: https://github.com/apache/tomcat-taglibs-standard/pull/3#issuecomment-1819973270 Superseded by #9. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] Update README.md [tomcat-tck]

2024-01-16 Thread via GitHub
markt-asf merged PR #1: URL: https://github.com/apache/tomcat-tck/pull/1 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[PR] Bump org.apache.tomcat:tomcat-coyote from 11.0.0-M14 to 11.0.0-M17 in /modules/openssl-foreign [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] opened a new pull request, #715: URL: https://github.com/apache/tomcat/pull/715 Bumps org.apache.tomcat:tomcat-coyote from 11.0.0-M14 to 11.0.0-M17. [![Dependabot compatibility

[PR] Bump org.apache.tomcat:tomcat-websocket from 11.0.0-M16 to 11.0.0-M17 in /modules/stuffed [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] opened a new pull request, #714: URL: https://github.com/apache/tomcat/pull/714 Bumps org.apache.tomcat:tomcat-websocket from 11.0.0-M16 to 11.0.0-M17. [![Dependabot compatibility

[PR] Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java21 [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] opened a new pull request, #716: URL: https://github.com/apache/tomcat/pull/716 Bumps org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86. [![Dependabot compatibility

[PR] Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java17 [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] opened a new pull request, #717: URL: https://github.com/apache/tomcat/pull/717 Bumps org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86. [![Dependabot compatibility

Re: [PR] Bump org.apache.tomcat:tomcat-websocket from 11.0.0-M16 to 11.0.0-M17 in /modules/stuffed [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] commented on PR #714: URL: https://github.com/apache/tomcat/pull/714#issuecomment-2050326037 Looks like org.apache.tomcat:tomcat-websocket is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the

Re: [PR] Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java21 [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] commented on PR #716: URL: https://github.com/apache/tomcat/pull/716#issuecomment-2050326279 Looks like org.apache.tomcat:tomcat-coyote is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message,

Re: [PR] Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java21 [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] closed pull request #716: Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java21 URL: https://github.com/apache/tomcat/pull/716 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and

Re: [PR] Bump org.apache.tomcat:tomcat-coyote from 11.0.0-M14 to 11.0.0-M17 in /modules/openssl-foreign [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] commented on PR #715: URL: https://github.com/apache/tomcat/pull/715#issuecomment-2050326108 Looks like org.apache.tomcat:tomcat-coyote is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message,

Re: [PR] Bump org.apache.tomcat:tomcat-websocket from 11.0.0-M16 to 11.0.0-M17 in /modules/stuffed [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] closed pull request #714: Bump org.apache.tomcat:tomcat-websocket from 11.0.0-M16 to 11.0.0-M17 in /modules/stuffed URL: https://github.com/apache/tomcat/pull/714 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub

Re: [PR] Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java17 [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] closed pull request #717: Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java17 URL: https://github.com/apache/tomcat/pull/717 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and

Re: [PR] Bump org.apache.tomcat:tomcat-coyote from 9.0.83 to 9.0.86 in /modules/openssl-java17 [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] commented on PR #717: URL: https://github.com/apache/tomcat/pull/717#issuecomment-2050326077 Looks like org.apache.tomcat:tomcat-coyote is up-to-date now, so this is no longer needed. -- This is an automated message from the Apache Git Service. To respond to the message,

Re: [PR] Bump org.apache.tomcat:tomcat-coyote from 11.0.0-M14 to 11.0.0-M17 in /modules/openssl-foreign [tomcat]

2024-04-11 Thread via GitHub
dependabot[bot] closed pull request #715: Bump org.apache.tomcat:tomcat-coyote from 11.0.0-M14 to 11.0.0-M17 in /modules/openssl-foreign URL: https://github.com/apache/tomcat/pull/715 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to

[PR] fix CVE-2024-23672 [tomcat]

2024-04-11 Thread via GitHub
achibear opened a new pull request, #718: URL: https://github.com/apache/tomcat/pull/718 Tomcat 8 fixed the CVE-2024-23672 vulnerability through commit [3631adb1](https://github.com/apache/tomcat/commit/3631adb1342d8bbd8598802a12b63ad02c37d591). However, we have discovered similar

Re: [PR] fix CVE-2024-23672 [tomcat]

2024-04-11 Thread via GitHub
aooohan closed pull request #718: fix CVE-2024-23672 URL: https://github.com/apache/tomcat/pull/718 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] fix CVE-2024-23672 [tomcat]

2024-04-11 Thread via GitHub
aooohan commented on PR #718: URL: https://github.com/apache/tomcat/pull/718#issuecomment-2050851432 Tomcat 7 is end of life since March 2021, so we won't merge this change, thanks. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to

Re: [PR] fix CVE-2024-23672 [tomcat]

2024-04-11 Thread via GitHub
hazendaz commented on PR #718: URL: https://github.com/apache/tomcat/pull/718#issuecomment-2050846843 Not speaking for team but as onlooker, Tomcat 7 is end of life since March 2021. There are no further updates. So it wouldn't make sense to patch it. It wouldn't be released anyways.

Re: [PR] Sessioncounter [tomcat]

2024-04-12 Thread via GitHub
rmaucher closed pull request #713: Sessioncounter URL: https://github.com/apache/tomcat/pull/713 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] Sessioncounter [tomcat]

2024-04-12 Thread via GitHub
rmaucher commented on PR #713: URL: https://github.com/apache/tomcat/pull/713#issuecomment-2051302240 Thanks for pointing this out. Since tracking too many redundant stats is not super useful, I decided to remove this one (it is now approximated by adding the active sessions to the expired

[PR] remove obsolete bean attributes [tomcat]

2024-04-13 Thread via GitHub
qauck opened a new pull request, #719: URL: https://github.com/apache/tomcat/pull/719 These attributes no longer existing in corresponding org.apache.tomcat.util.net.NioEndpoint, which will cause java.lang.NoSuchMethodException at run time. -- This is an automated message from the

[I] activemq 5.16.x not working after converting javax to jakarta using tomcat transformer [tomcat-jakartaee-migration]

2024-04-17 Thread via GitHub
ilapavuluri opened a new issue, #55: URL: https://github.com/apache/tomcat-jakartaee-migration/issues/55 I am using tomcat transformer for javax to jakarta conversion, in the similar lines I converted my activemq-all 5.16.7 into jakarta using the same tomcat transformer, no errors during

[PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-17 Thread via GitHub
jose-galvez opened a new pull request, #720: URL: https://github.com/apache/tomcat/pull/720 commit [a8575ef](https://github.com/apache/tomcat/commit/a8575efbc1de64fe58c8fd99e53a0011b59a8e86) removed support for seconds with floating point for the Extended Access Log Valve and made it only

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-17 Thread via GitHub
markt-asf commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2061540617 From memory that change was to align Tomcat's access log configuration with httpd. It may well be that the correct fix here is to correct the documentation. Separately, comparing this

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-17 Thread via GitHub
jose-galvez commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2061821679 > From memory that change was to align Tomcat's access log configuration with httpd. It may well be that the correct fix here is to correct the documentation. Separately, comparing this

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-17 Thread via GitHub
ChristopherSchultz commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2061771435 Why not use `%D` which is in milliseconds (Tomcat <10) or microseconds (Tomcat >= 10)? -- This is an automated message from the Apache Git Service. To respond to the message,

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-17 Thread via GitHub
jose-galvez commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2061838297 > Why not use `%D` which is in milliseconds (Tomcat <10) or microseconds (Tomcat >= 10)? I wanted to keep parity on the behavior here with previous versions, especially because

Re: [PR] Add support for timescales with time-taken access log token. [tomcat]

2024-04-19 Thread via GitHub
markt-asf commented on code in PR #721: URL: https://github.com/apache/tomcat/pull/721#discussion_r1572780769 ## java/org/apache/catalina/valves/AbstractAccessLogValve.java: ## @@ -1756,10 +1776,14 @@ protected AccessLogElement createAccessLogElement(String name, char pattern)

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-18 Thread via GitHub
jose-galvez commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2063746801 It can, but in this case the documentation states that it didn't so I was trying to bring it back to how it behaved before (which as an added bonus helps us not change our scripts).

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-18 Thread via GitHub
ChristopherSchultz commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2063868914 Oh, I'm' sorry I didn't pick-up on the subtleties of your report. Tomcat 10.1 is documented that the value for `%T` is in (presumably _whole_) seconds. Tomcat 9 says it's

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-18 Thread via GitHub
ChristopherSchultz commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2063733345 So nothing can ever change, then? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go

Re: [PR] Re-adding support for fractional seconds in access log [tomcat]

2024-04-18 Thread via GitHub
jose-galvez commented on PR #720: URL: https://github.com/apache/tomcat/pull/720#issuecomment-2064310044 > Are you specifically talking about the ExtendedAccessLogValve's `time-taken` token? If so, you're right, that documentation did not change yet the underlying implementation did

[PR] Configurable HTML subtitle in Manager web application [tomcat]

2024-04-22 Thread via GitHub
xsimo opened a new pull request, #724: URL: https://github.com/apache/tomcat/pull/724 Managing multiple tomcats on multiple servers, the need came to have a way of customizing the Manager HTML interface. This PR proposes to add a simple configurable html subtitle.

Re: [PR] Simplify usage of custom ssl configuration [tomcat]

2024-04-11 Thread via GitHub
Hakky54 commented on PR #706: URL: https://github.com/apache/tomcat/pull/706#issuecomment-2049034933 Hi @markt-asf What do you think of this PR, would it make sense to have this kind of wrapper, or does it needs to be adjusted or would you like me to close it and disregard it?

Re: [PR] Add support for timescales with time-taken access log token. [tomcat]

2024-04-26 Thread via GitHub
ChristopherSchultz merged PR #721: URL: https://github.com/apache/tomcat/pull/721 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: [PR] Add support for timescales with time-taken access log token. [tomcat]

2024-04-24 Thread via GitHub
ChristopherSchultz commented on code in PR #721: URL: https://github.com/apache/tomcat/pull/721#discussion_r1578085100 ## java/org/apache/catalina/valves/AbstractAccessLogValve.java: ## @@ -1756,10 +1776,14 @@ protected AccessLogElement createAccessLogElement(String name, char

<    5   6   7   8   9   10   11   12   >