Author: kkolinko Date: Fri Sep 26 23:47:36 2014 New Revision: 1627911 URL: http://svn.apache.org/r1627911 Log: Add work-in-progress warning to CookieProcessor document. I am not quite satisfied with my wording, but it is better than nothing.
Mention this new configuration option in changelog. Modified: tomcat/trunk/webapps/docs/changelog.xml tomcat/trunk/webapps/docs/config/cookie-processor.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1627911&r1=1627910&r2=1627911&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/changelog.xml (original) +++ tomcat/trunk/webapps/docs/changelog.xml Fri Sep 26 23:47:36 2014 @@ -56,6 +56,13 @@ <bug>57016</bug>: When using the <code>PersistentValve</code> do not remove sessions from the store when persisting them. (markt) </fix> + <add> + Introduce new configuration element CookieProcessor in Context to allow + context-specific configuration of cookie processing options. Attributes + of Context element that were added in Tomcat 8.0.13 to allow + configuration of a new experimental RFC6265 based cookie parser are + replaced by this new configuration element. (markt) + </add> </changelog> </subsection> <subsection name="Web applications"> @@ -123,7 +130,7 @@ <add> Add an additional implementation of a RFC6265 based cookie parser along with new Context options to select and configure it. This parser is - currently considered experiemental and is not used by default. (markt) + currently considered experimental and is not used by default. (markt) </add> <fix> Fixed the multipart elements merge operation performed during web Modified: tomcat/trunk/webapps/docs/config/cookie-processor.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/cookie-processor.xml?rev=1627911&r1=1627910&r2=1627911&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/config/cookie-processor.xml (original) +++ tomcat/trunk/webapps/docs/config/cookie-processor.xml Fri Sep 26 23:47:36 2014 @@ -45,6 +45,34 @@ <a href="context.html">Context</a> component. If it is not included, a default implementation will be created automatically.</p> + <p><strong>Note:</strong> <strong>CookieProcessor</strong> is a new + configuration element, introduced in Tomcat 8.0.15. + <strong>This is work in progress.</strong> + The goal is to review the current implementation of HTTP Cookie headers + processing in Tomcat to provide better compliance with RFC6265 specification. + The ideas are summarized on a + <a href="https://wiki.apache.org/tomcat/Cookies">Wiki page</a> and discussed + on <a href="http://tomcat.apache.org/lists.html">mailing lists</a>. + Notable points:</p> + + <ul> + <li><strong>CookieProcessor</strong> element allows to configure cookie + parsing separately in each web application, or globally in the default + <code>conf/context.xml</code> file. The legacy cookie parsing algorithm + supported only limited global configuration via several + <a href="systemprops.html#Specifications">system properties</a>. Those + system properties are still supported, but are going to be deprecated in + favor of this new configuration element. + </li> + <li>The new RFC6265-compliant (<em>work in progress</em>) implementation + is a stand-in replacement for the original legacy one. Until the new code + is stabilized, the legacy implementation remains the default one. + You can select the implementation by setting <code>className</code> + attribute on <strong>CookieProcessor</strong> element.</li> + <li>This is work in progress. Configuration attributes may change in a + future release.</li> + </ul> + </section> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org