on
> >
> > On Tue, Dec 8, 2020 at 1:46 PM Alex The Rocker
> wrote:
> >
> > > In that case, could xalan-reintroduction be limited to TomEE 9.x ?
> > > What's the urge with TomEE 8.x vs. impacts risks ?
> > >
> > > Le mar. 8 déc. 2020 à 14
8 déc. 2020 à 14:39, Jonathan Gallimore
> > a écrit :
> > >
> > > We fixed a specific issue by removing Xalan, but without realizing the
> > > impact on JSTL. We'll need to fix this one way or another. There's a
> > couple
> > > of options:
&g
t it here.
>
> Jon
>
> On Tue, Dec 8, 2020 at 1:46 PM Alex The Rocker
> wrote:
>
> > In that case, could xalan-reintroduction be limited to TomEE 9.x ?
> > What's the urge with TomEE 8.x vs. impacts risks ?
> >
> > Le mar. 8 déc. 2020 à 14:39, Jonathan Gal
. impacts risks ?
>
> Le mar. 8 déc. 2020 à 14:39, Jonathan Gallimore
> a écrit :
> >
> > We fixed a specific issue by removing Xalan, but without realizing the
> > impact on JSTL. We'll need to fix this one way or another. There's a
> couple
> > of opti
In that case, could xalan-reintroduction be limited to TomEE 9.x ?
What's the urge with TomEE 8.x vs. impacts risks ?
Le mar. 8 déc. 2020 à 14:39, Jonathan Gallimore
a écrit :
>
> We fixed a specific issue by removing Xalan, but without realizing the
> impact on JSTL. We'll n
We fixed a specific issue by removing Xalan, but without realizing the
impact on JSTL. We'll need to fix this one way or another. There's a couple
of options:
1. Re-introduce Xalan and patch it (which seems to be the common
approach across the app servers)
2. Implement what we need with
t;> I was under the impression that the Transformer functionality was part of
> >> the JDK, so I'm curious as to what is missing. I'll have a look at that
> >> failing test. Looks like we're missing org.apache.xpath - looks like this
> >> is a little me
s
>> is a little messy.
>>
>> Jon
>>
>> On Tue, Dec 8, 2020 at 9:58 AM Jean-Louis Monteiro <
>> jlmonte...@tomitribe.com>
>> wrote:
>>
>> > Hi,
>> >
>> > Been looking at the JSTL failures
>> >
>> &g
> failing test. Looks like we're missing org.apache.xpath - looks like this
> is a little messy.
>
> Jon
>
> On Tue, Dec 8, 2020 at 9:58 AM Jean-Louis Monteiro <
> jlmonte...@tomitribe.com>
> wrote:
>
> > Hi,
> >
> > Been looking
e we're missing org.apache.xpath - looks like this
is a little messy.
Jon
On Tue, Dec 8, 2020 at 9:58 AM Jean-Louis Monteiro
wrote:
> Hi,
>
> Been looking at the JSTL failures
>
> http://ec2-54-173-218-40.compute-1.amazonaws.com:17171/tests?path=com.sun.ts.tests.jstl&
Hi,
Been looking at the JSTL failures
http://ec2-54-173-218-40.compute-1.amazonaws.com:17171/tests?path=com.sun.ts.tests.jstl&build=1607347669779&status=FAILED
I realized that Xalan is missing from our distribution.
Looks like it's been removed about a year ago.
https://github.com
ably merited in
order to double check that and compare, and also to ensure that changing it
doesn't negatively impact performance.
On the 1.7.x branch I previously noted that I switched back to
OpenEJB-JSTL. I have pushed a patch for CVE-2015-0254
<http://web.nvd.nist.gov/view/vuln/detail?vu
nnibu...@gmail.com
>>>
>>>> wrote:
>>>>>
>>>>> Hi Jon
>>>>>>
>>>>>> there is another thread on it (probably on user@)
>>>>>>
>>>>>> I think we should just make xalan optional in
CDDL or GPL with classpath exception".
On Thu, Aug 31, 2017 at 12:16 PM, Jonathan Gallimore <
jonathan.gallim...@gmail.com> wrote:
Great question. CDDL _or_ GPL, by the look of it.
https://github.com/javaee/jstl-api/blob/master/LICENSE - same as
JAXB
I
believe.
Jon
On
om> | Github <https://github.com/
> >>> rmannibucau> |
> >>> LinkedIn <https://www.linkedin.com/in/rmannibucau> | JavaEE Factory
> >>> <https://javaeefactory-rmannibucau.rhcloud.com>
> >>>
> >>> 2017-08-3
cau.rhcloud.com>
>>>
>>> 2017-08-31 13:19 GMT+02:00 Jonathan Gallimore <
>>> jonathan.gallim...@gmail.com>
>>> :
>>>
>>>> Correction - that should be: "CDDL or GPL with classpath exception".
>>>>
>>>
| Github <
https://github.com/
rmannibucau> |
LinkedIn <https://www.linkedin.com/in/rmannibucau> |
JavaEE
Factory
<https://javaeefactory-rmannibucau.rhcloud.com>
2017-08-31 13:19 GMT+02:00 Jonathan Gallimore <
jonathan.gallim...@gmail.com>
:
Correction - that should be: &qu
Reverted my change back to the openejb-jstl on 1.7.x just until I have a
patch for the Tomcat JSTL jars ready.
Jon
On Fri, Sep 1, 2017 at 10:10 AM, Jonathan Gallimore <
jonathan.gallim...@gmail.com> wrote:
> Awesome, thanks!
>
> Jon
>
> On Fri, Sep 1, 2017 at 6
> > >
> > > > > > > > Thanks Romain. That is definitely the simplest path - xalan
> is
> > > > > already
> > > > > > > > marked as an optional dependency, so we wouldn't need to do
> > > > anything.
> > > > > >
> > > > > From
> > > > > > > a compliance perspective, where would this leave us? Wouldn't
> we
> > > need
> > > > > > this
> > > > > > > to work out of the box without adding libraries to be
> compliant?
> >
> > > > > > to work out of the box without adding libraries to be compliant?
> If
> > > it
> > > > > > doesn't affect us in that respect, then I think we're probably
> good
> > > to
> > > > > go.
> > > > &
> > > wrote:
> > > > >
> > > > > > Hi Jon
> > > > > >
> > > > > > there is another thread on it (probably on user@)
> > > > > >
> > > > > > I think we should just make xalan optional in the l
re is another thread on it (probably on user@)
> > > > >
> > > > > I think we should just make xalan optional in the lib and upgrade.
> > > > >
> > > > >
> > > > > Romain Manni-Bucau
> > > > > @rmannibucau <https://twit
://rmannibucau.wordpress.com> | Github <https://github.com/
> > > > rmannibucau> |
> > > > LinkedIn <https://www.linkedin.com/in/rmannibucau> | JavaEE Factory
> > > > <https://javaeefactory-rmannibucau.rhcloud.com>
> > >
-rmannibucau.rhcloud.com>
> > >
> > > 2017-08-31 13:19 GMT+02:00 Jonathan Gallimore <
> > > jonathan.gallim...@gmail.com>
> > > :
> > >
> > > > Correction - that should be: "CDDL or GPL with classpath exception".
> > > >
gt;
> > :
> >
> > > Correction - that should be: "CDDL or GPL with classpath exception".
> > >
> > > On Thu, Aug 31, 2017 at 12:16 PM, Jonathan Gallimore <
> > > jonathan.gallim...@gmail.com> wrote:
> > >
> > > >
quot;.
> >
> > On Thu, Aug 31, 2017 at 12:16 PM, Jonathan Gallimore <
> > jonathan.gallim...@gmail.com> wrote:
> >
> > > Great question. CDDL _or_ GPL, by the look of it.
> > > https://github.com/javaee/jstl-api/blob/master/LICENSE - same as JAXB
>
path exception".
>
> On Thu, Aug 31, 2017 at 12:16 PM, Jonathan Gallimore <
> jonathan.gallim...@gmail.com> wrote:
>
> > Great question. CDDL _or_ GPL, by the look of it.
> > https://github.com/javaee/jstl-api/blob/master/LICENSE - same as JAXB I
> > belie
Correction - that should be: "CDDL or GPL with classpath exception".
On Thu, Aug 31, 2017 at 12:16 PM, Jonathan Gallimore <
jonathan.gallim...@gmail.com> wrote:
> Great question. CDDL _or_ GPL, by the look of it.
> https://github.com/javaee/jstl-api/blob/master/LICENSE - sa
Great question. CDDL _or_ GPL, by the look of it.
https://github.com/javaee/jstl-api/blob/master/LICENSE - same as JAXB I
believe.
Jon
On Thu, Aug 31, 2017 at 11:55 AM, Jean-Louis Monteiro <
jlmonte...@tomitribe.com> wrote:
> What is the licence for GlassFish one?
>
> Le 31
What is the licence for GlassFish one?
Le 31 août 2017 12:38, "Jonathan Gallimore"
a écrit :
> Hi
>
> On master we shifted from openejb-jstl to taglibs-standard-jstlel. I have
> done the same on the 1.7.x branch, specifically to move on from the old
> openejb
Hi
On master we shifted from openejb-jstl to taglibs-standard-jstlel. I have
done the same on the 1.7.x branch, specifically to move on from the old
openejb-jstl (looking at
https://nvd.nist.gov/vuln/detail/CVE-2015-0254). The
taglibs-standard-jstlel
library does seem to depend on xalan, which we
Yes it's fixed, it was a CATALINA_OPTS configuration issue from our side.
Thanks Romain.
-
Carlos Chacin
http://github.com/cchacin
--
View this message in context:
http://tomee-openejb.979440.n4.nabble.com/jstl-issue-tp4673005p4673079.html
Sent from the TomEE Dev mailing list archi
You mean it is fixed or not on our side?
Le 28 nov. 2014 21:53, "cchacin" a écrit :
> Pushed a Dockerfile to reproduce the issue:
> https://github.com/cchacin/tomee-jstl-test/blob/master/Dockerfile
> <https://github.com/cchacin/tomee-jstl-test/blob/master/Dockerfile>
&g
Pushed a Dockerfile to reproduce the issue:
https://github.com/cchacin/tomee-jstl-test/blob/master/Dockerfile
<https://github.com/cchacin/tomee-jstl-test/blob/master/Dockerfile>
The problem was related to jsvc with wrong parameters:
duplicated parameter:
*-Djava.endorsed.dirs=${CATALIN
://github.com/rmannibucau
2014-11-26 19:25 GMT+01:00 cchacin :
> Working example: https://github.com/cchacin/tomee-jstl-test
>
>
>
> --
> View this message in context:
> http://tomee-openejb.979440.n4.nabble.com/jstl-issue-tp4673005p4673045.html
> Sent from the TomEE Dev
Working example: https://github.com/cchacin/tomee-jstl-test
--
View this message in context:
http://tomee-openejb.979440.n4.nabble.com/jstl-issue-tp4673005p4673045.html
Sent from the TomEE Dev mailing list archive at Nabble.com.
ning locally on my mac
> works fine though.
> I am using <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core";
> %>
> in my index.jsp. I also tried everything I could find to add jstl related
> dependencies to pom.xml or copy jstl-1.2.jar to lib fo
Hi,
I am using tomee 1.6 and keep getting the following errors on the remote
host. Could you please help me out here? However, running locally on my mac
works fine though.
I am using <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"; %>
in my index.jsp. I als
39 matches
Mail list logo
