RE: Tomcat Native

2023-08-25 Thread Mcalexander, Jon J.
Thank you! Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions 8080 Cobblestone Rd | Urbandale, IA 50322 MAC: F4469-010 Tel 515-988-2508 | Cell

Re: OT: where does JSTL set thsi cookie? javax.servlet.jsp.jstl.fmt.request.charset

2023-08-25 Thread Christopher Schultz
Ivano, On 8/25/23 10:50, Ivano Luberti wrote: Hi, I understand that this question can be OT but I don't know where to search for. Looking into tomcat manager sessions I see this cookie set in each session     javax.servlet.jsp.jstl.fmt.request.charset     ISO-8859-1 The value ISO-8859-1 i

Re: [EXTERNAL] RE: DataSource Connection pool leak

2023-08-25 Thread Christopher Schultz
Tim, On 8/25/23 10:48, Scott,Tim wrote: Hi John, Why does your app need 20 connections just to start up? That's a bit of a rhetorical question, but needing so many connections to start up seems odd to me. It doesn't. It only needs 1-2 at a time, but it makes 100s of queries in loops, each

[SECURITY] CVE-2023-41080 Apache Tomcat - open redirect

2023-08-25 Thread Mark Thomas
CVE-2023-41080 Apache Tomcat - Open redirect Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.0-M10 Apache Tomcat 10.1.0-M1 to 10.1.12 Apache Tomcat 9.0.0-M1 to 9.0.79 Apache Tomcat 8.5.0 to 8.5.92 Description: If the ROOT (default)

[ANN] Apache Tomcat 8.5.93 available

2023-08-25 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.93. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.93 is a bugfix and

[ANN] Apache Tomcat 9.0.80 available

2023-08-25 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.80. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.80 is a bugfix and

[ANN] Apache Tomcat 10.1.13 available

2023-08-25 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.13. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 11.0.0-M11 (alpha) available

2023-08-25 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M11 (alpha). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

RE: [External] Re: listening all local addresses by default is not security best practice

2023-08-25 Thread Amit Pande
Thank you, Chris, for inputs. I have created a BZ ticket: https://bz.apache.org/bugzilla/show_bug.cgi?id=67065 Thanks, Amit -Original Message- From: Christopher Schultz Sent: Monday, August 14, 2023 10:47 AM To: Tomcat Users List Subject: Re: [External] Re: listening all local

Re: OT: where does JSTL set thsi cookie? javax.servlet.jsp.jstl.fmt.request.charset

2023-08-25 Thread Mark Thomas
On 25/08/2023 07:50, Ivano Luberti wrote: Hi, I understand that this question can be OT but I don't know where to search for. Looking into tomcat manager sessions I see this cookie set in each session     javax.servlet.jsp.jstl.fmt.request.charset     ISO-8859-1 The value ISO-8859-1 i

AW: where does JSTL set thsi cookie? javax.servlet.jsp.jstl.fmt.request.charset

2023-08-25 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, > -Ursprüngliche Nachricht- > Von: Ivano Luberti > Gesendet: Freitag, 25. August 2023 16:50 > An: users@tomcat.apache.org > Betreff: OT: where does JSTL set thsi cookie? > javax.servlet.jsp.jstl.fmt.request.charset > > Hi, I understand that this question can be OT but I don't

OT: where does JSTL set thsi cookie? javax.servlet.jsp.jstl.fmt.request.charset

2023-08-25 Thread Ivano Luberti
Hi, I understand that this question can be OT but I don't know where to search for. Looking into tomcat manager sessions I see this cookie set in each session     javax.servlet.jsp.jstl.fmt.request.charset     ISO-8859-1 The value ISO-8859-1 i set even though the file encoding of the java

RE: [EXTERNAL] RE: DataSource Connection pool leak

2023-08-25 Thread Scott,Tim
Hi John, > Why does your app need 20 connections just to start up? That's a bit of a > rhetorical question, but needing so many connections to start up seems odd to > me. It doesn't. It only needs 1-2 at a time, but it makes 100s of queries in loops, each time using a connection from

RE: DataSource Connection pool leak

2023-08-25 Thread John.E.Gregg
Tim, > -Original Message- > From: Scott,Tim > Sent: Friday, August 25, 2023 3:09 AM > To: users@tomcat.apache.org > Subject: DataSource Connection pool leak > > Hi, > > For various diagnostics, I tried Tomcat 9.0.79 recently on a development > machine. It didn't solve the problem I was

DataSource Connection pool leak

2023-08-25 Thread Scott,Tim
Hi, For various diagnostics, I tried Tomcat 9.0.79 recently on a development machine. It didn't solve the problem I was experiencing - that was later identified as a problem in IntelliJ with remote deployment and is not why I'm mailing. I tweaked my Tomcat 9.0.79 configuration to start my