Re: Can jasper2's validateXml be added back, at least for the lifetime of Tomcat 7?

2014-02-21 Thread Mark_DeSpain
Got it. Much appreciated! On 2/21/14, 1:11 AM, Mark Thomas ma...@apache.org wrote: On 21/02/2014 01:44, mark_desp...@mcafee.com wrote: Thank you for the quick reply, Mark. Would it be possible to get a sense of which release the validateXml attribute might get added back? E.g. 7.0.53?

Re: Can jasper2's validateXml be added back, at least for the lifetime of Tomcat 7?

2014-02-20 Thread Mark_DeSpain
Thank you for the quick reply, Mark. Would it be possible to get a sense of which release the validateXml attribute might get added back? E.g. 7.0.53? I did a quick search through the bugs, but it does not seem to be tracked. Would it be worth submitting something? Thanks! Mark D. On

Can jasper2's validateXml be added back, at least for the lifetime of Tomcat 7?

2014-02-19 Thread Mark_DeSpain
Hi everyone, My project recently tried upgrading to Tomcat 7.0.52 and has become bit by the renaming of jasper2’s “validateXml” to “validateTld”, as described on the thread below. This change has made it more difficult pick up the latest Tomcat 7’s security fixes since the change breaks build

RE: SSL Mysterious Self Signed Certificate

2009-05-07 Thread Mark_Despain
Can you clarify on mysterious self-signed certificate displayed within the browser? Also, into what did you import the relevant root certs and SSL cert? The keystore? W is right. If your certificate is was not issued (signed) by a CA that the browser trusts, then the browser will not

RE: Headstart on Resolving OOM-PermGen errors on webapp reload

2009-04-22 Thread Mark_Despain
Yeah, Insane just using reflection and a graph traversal algorithm to get the job done. It looks like this is implemented by org.netbeans.insane.impl.InsaneEngine. Oh, and I found my copy of the Insane source. The third argument to ScannerUtils.scan() should be true since that is what

RE: Headstart on Resolving OOM-PermGen errors on webapp reload

2009-04-22 Thread Mark_Despain
I don't doubt that jmap/jhat would be able to give you more detailed information. My exact goal was to come up with something for automated testing that would help prevent classloader leaks from making it into production. If someone can think of a programmatic way to do that with jmap/jhat,

RE: Headstart on Resolving OOM-PermGen errors on webapp reload

2009-04-21 Thread Mark_Despain
Hi Ken (and Mark), Different Mark here... I'm new to this mailing list and am not a Tomcat developer. Forgive me if I'm interrupting your thread, but I am very interested in this topic, since I've spent a fair amount of time debugging OOM-PermGen errors within Tomcat (5.5.x). I would be

RE: Headstart on Resolving OOM-PermGen errors on webapp reload

2009-04-21 Thread Mark_Despain
Hi Chris, I'll follow up later tonight. Hopefully I'll have less typos then, but don't be surprised if I just go triple-negative instead :) ~Mark -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, April 21, 2009 3:47 PM To: Tomcat

RE: Headstart on Resolving OOM-PermGen errors on webapp reload

2009-04-21 Thread Mark_Despain
Ok, so my wife actually wrote a couple of month ago in Japanese about using strategy for leveraging the Insane library and a continuous integration server in order to prevent webapp classloader leakage issues from creeping in. If you can read Japanese, check out