rzo1 opened a new pull request, #2945:
URL: https://github.com/apache/tomee/pull/2945

   TomEE serves requests through Tomcat's connectors, so the hand written HTTP 
server in `openejb-http` is unused attack surface. This removes it along with 
the unreachable Jetty backend, the `httpejbd` service and 
`OpenEJBHttpRegistry`, keeping everything Tomcat needs: the listeners and 
registry, the request/response/session types, the servlet and filter adapters, 
`ServerServlet` and the CDI listeners.
   
   `RsRegistryImpl` and `OpenEJBHttpWsRegistry` extended `OpenEJBHttpRegistry` 
and were the non-Tomcat fallbacks in `RESTService`/`WsService`, so they go too 
— `openejb-standalone` and `arquillian-openejb-embedded` lose their embedded 
REST/WS wiring, which is accepted for a major release.
   
   The tests that drove the removed transport over a socket are removed with 
it; the remaining 14 pass, and all dependent modules still build.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to