Re: Question regarding changelog in 8.5.46

2019-10-02 Thread Mark Thomas
On 02/10/2019 16:16, M. Manna wrote: > Hello, > > http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.46_(markt) > > > I am just trying to understand if these changes have any impact on 8.5.45 > with CPU usage. It seems to be some potential NPE and (HTTP/2 only) hanging > issues.

Question regarding changelog in 8.5.46

2019-10-02 Thread M. Manna
Hello, http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.46_(markt) I am just trying to understand if these changes have any impact on 8.5.45 with CPU usage. It seems to be some potential NPE and (HTTP/2 only) hanging issues. We are seeing some CPU spikes with 8.5.45 and these

Re: Apache SSI breaks with tomcat-connectors-1.2.43 or newer

2019-10-02 Thread Mark Thomas
On 02/10/2019 15:39, Mark Thomas wrote: > On 02/10/2019 14:51, Mark Thomas wrote: > There is a work-around. Use virtual="..." in the SSI includes. > > Meanwhile, I am working on a fix for mod_jk. Done. If you want to test it out you'll have to build from svn. Meanwhile, I'll start thinking

Re: Apache SSI breaks with tomcat-connectors-1.2.43 or newer

2019-10-02 Thread Mark Thomas
On 02/10/2019 14:51, Mark Thomas wrote: > On 30/09/2019 20:33, Rainer Jung wrote: >> Thanks, eactly what we need. > > +1. I can reproduce this. > >> I will look into it, but it might take two >> or three days. Anyone who can do it more quickly is welcome. I suspect >> these log lines point to

Re: Apache SSI breaks with tomcat-connectors-1.2.43 or newer

2019-10-02 Thread Mark Thomas
On 30/09/2019 20:33, Rainer Jung wrote: > Thanks, eactly what we need. +1. I can reproduce this. > I will look into it, but it might take two > or three days. Anyone who can do it more quickly is welcome. I suspect > these log lines point to the root cause: > >> [Mon Sep 30 15:04:03

Re: Security issue involving HTTP response headers

2019-10-02 Thread Mark Thomas
On 02/10/2019 07:05, jonmcalexan...@wellsfargo.com.INVALID wrote: > Tomcat 7.0.63 and above. > > Navigate to the tomcat conf directory and open the web.xml with a text editor. If you edit $CATALINA_BASE/conf/web.xml that will apply to every web application deployed on the Tomcat instance. You

Re: Tomcat 9.0.24/9.0.26 suspected memory leak

2019-10-02 Thread Mark Thomas
On 02/10/2019 01:28, Chen Levy wrote: >> -Original Message- >> From: Mark Thomas >> Sent: Tuesday, October 1, 2019 17:43 >> To: users@tomcat.apache.org >> Subject: Re: Tomcat 9.0.24/9.0.26 suspected memory leak >> >> Found it. >> >> HTTP/2 on NIO is affected. >> HTTP/2 on APR/native is

Re: Apache SSI breaks with tomcat-connectors-1.2.43 or newer

2019-10-02 Thread glal
Hi all, I have almost the same issue with SSI provided by AEM Sling Dynamic Include. Page shows error message instead of html block: *[an error occurred while processing this directive]* Dispatcher error log file has lines like: /unable to include

Re: Security issue involving HTTP response headers

2019-10-02 Thread Peter Kreuser
Hi James, Peter Kreuser > Am 02.10.2019 um 08:05 schrieb > : > > Tomcat 7.0.63 and above. > > Navigate to the tomcat conf directory and open the web.xml with a text editor. > > In the filter section of the web.xml add the following filter > > > httpHeaderSecurity > >

RE: Security issue involving HTTP response headers

2019-10-02 Thread jonmcalexander
Tomcat 7.0.63 and above. Navigate to the tomcat conf directory and open the web.xml with a text editor. In the filter section of the web.xml add the following filter httpHeaderSecurity org.apache.catalina.filters.HttpHeaderSecurityFilter antiClickJackingOption