svn propchange: r1823314 - svn:log

2018-02-27 Thread markt
Author: markt
Revision: 1823314
Modified property: svn:log

Modified: svn:log at Tue Feb 27 17:30:39 2018
--
--- svn:log (original)
+++ svn:log Tue Feb 27 17:30:39 2018
@@ -1,3 +1,4 @@
 Process all ServletSecurity annotations at web application start rather
 than at servlet load time to ensure constraints are applied
 consistently.
+This is fix 1 of 2 for CVE-2018-1305


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn propchange: r1823314 - svn:log

2018-02-06 Thread markt
Author: markt
Revision: 1823314
Modified property: svn:log

Modified: svn:log at Tue Feb  6 12:27:02 2018
--
--- svn:log (original)
+++ svn:log Tue Feb  6 12:27:02 2018
@@ -1,2 +1,3 @@
-Correctly apply security constraints mapped to the context root using a
-URL pattern of ""
+Process all ServletSecurity annotations at web application start rather
+than at servlet load time to ensure constraints are applied
+consistently.


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org