The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.121.
Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.121 is a bugfix and feature release. The notable changes compared to 9.0.120 include: - Add a new attribute to the Context, urlPatternsProvidedInDecodedForm. This attribute controls whether URLs and URL patterns provided in the deployment descriptor (web.xml), annotations and/or their programmatic equivalents are treated as being provided in URL-encoded form (i.e. using %nn encoding) or in decoded form. The Servlet specification requires that they are provided in decoded form. However, Tomcat has historically treated them as if they are provided in encoded form. In Tomcat 12, they will always be treated as if they are provided in decoded form. This setting enables migration from encoded form to decoded form on an application by application basis. This attribute will be removed in Tomcat 12 where it will effectively be hard-coded to true. - Require every HTTP/2 request to provide an authority (either an :authority pseudo header or a Host header) - Change the default encryptionAlgorithm for the EncryptInterceptor to AES/GCM/NoPadding. This is a breaking change for the EncryptInterceptor. Along with lots of other bug fixes and improvements. Please refer to the change log for the complete list of changes: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html Downloads: https://tomcat.apache.org/download-90.cgi Migration guides from Apache Tomcat 7.x and 8.x: https://tomcat.apache.org/migration.html Enjoy! - The Apache Tomcat team --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
