Bug report for Tomcat Modules [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat Native [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat Connectors [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Taglibs [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 7 [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 8 [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 6 [2013/03/03]

2013-03-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

buildbot success in ASF Buildbot on tomcat-trunk

2013-03-02 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/4010 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: scheduler Build Source

Re: URIs, %nn decoding and error handling

2013-03-02 Thread Konstantin Kolinko
2013/3/2 Mark Thomas : > >> 3. I remember discussions on the mailing lists regarding whether it is >> possible to make uri-encoding to be webapp-specific setting. > > That is never going to be possible because decoding has to happen before > mapping. > My idea roughly is 1. Let Mapper operate on b

svn commit: r1451956 - /tomcat/trunk/test/org/apache/catalina/connector/TestCoyoteAdapter.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 22:41:20 2013 New Revision: 1451956 URL: http://svn.apache.org/r1451956 Log: Remove a copy/paste comment used to construct a test Modified: tomcat/trunk/test/org/apache/catalina/connector/TestCoyoteAdapter.java Modified: tomcat/trunk/test/org/apache/catalina/co

svn commit: r1451955 - /tomcat/trunk/test/org/apache/catalina/connector/TestCoyoteAdapter.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 22:40:01 2013 New Revision: 1451955 URL: http://svn.apache.org/r1451955 Log: Add test case that highlights need to switch to Harmony decoder Modified: tomcat/trunk/test/org/apache/catalina/connector/TestCoyoteAdapter.java Modified: tomcat/trunk/test/org/apache/

svn commit: r1451950 - /tomcat/trunk/test/org/apache/tomcat/websocket/TestUtf8.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 22:14:03 2013 New Revision: 1451950 URL: http://svn.apache.org/r1451950 Log: Check to see if JVM's UTF-8 decoder handles invalid sequences better if endOfInput is true (it does). Modified: tomcat/trunk/test/org/apache/tomcat/websocket/TestUtf8.java Modified: t

svn commit: r1451947 - in /tomcat/trunk: java/org/apache/catalina/connector/CoyoteAdapter.java java/org/apache/tomcat/util/buf/B2CConverter.java test/org/apache/catalina/connector/TestCoyoteAdapter.ja

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 22:04:46 2013 New Revision: 1451947 URL: http://svn.apache.org/r1451947 Log: Remove fall back to 'ASCII' (really ISO-8859-1) Replace partial / invalid byte sequences rather than trigger an error (allows application to handle the resulting 404) Modified: tomcat/

svn commit: r1451939 - /tomcat/trunk/java/org/apache/catalina/connector/CoyoteAdapter.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 20:27:28 2013 New Revision: 1451939 URL: http://svn.apache.org/r1451939 Log: When decoding URIs we always have the full input available. Ensure partial / invalid bytes at the end of the URI trigger an error. Modified: tomcat/trunk/java/org/apache/catalina/conne

svn commit: r1451938 - /tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 20:26:00 2013 New Revision: 1451938 URL: http://svn.apache.org/r1451938 Log: Fix Javadoc Modified: tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java Modified: tomcat/trunk/java/org/apache/tomcat/util/buf/B2CConverter.java URL: http://svn.apache.or

svn commit: r1451937 - /tomcat/trunk/java/org/apache/tomcat/websocket/server/ServerContainerImpl.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 20:25:34 2013 New Revision: 1451937 URL: http://svn.apache.org/r1451937 Log: Fix Javadoc warnings Modified: tomcat/trunk/java/org/apache/tomcat/websocket/server/ServerContainerImpl.java Modified: tomcat/trunk/java/org/apache/tomcat/websocket/server/ServerCont

svn commit: r1451935 - /tomcat/trunk/test/org/apache/tomcat/websocket/TestWebSocket.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 20:23:47 2013 New Revision: 1451935 URL: http://svn.apache.org/r1451935 Log: Fix deprecation warning Modified: tomcat/trunk/test/org/apache/tomcat/websocket/TestWebSocket.java Modified: tomcat/trunk/test/org/apache/tomcat/websocket/TestWebSocket.java URL: http

svn commit: r1451934 - /tomcat/trunk/java/org/apache/catalina/webresources/StandardRoot.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 20:22:20 2013 New Revision: 1451934 URL: http://svn.apache.org/r1451934 Log: Include invalid main resource location in error message Modified: tomcat/trunk/java/org/apache/catalina/webresources/StandardRoot.java Modified: tomcat/trunk/java/org/apache/catalina/w

svn commit: r1451933 - in /tomcat/trunk: java/org/apache/tomcat/websocket/Utf8Decoder.java test/org/apache/tomcat/websocket/TestUtf8.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 20:17:28 2013 New Revision: 1451933 URL: http://svn.apache.org/r1451933 Log: Expand UTF-8 tests based on a test case written by Joe Orton for CVE-2008-2938 Note the additional failures this generates are not exploitable. They are invalid only because they encode a v

svn commit: r1451927 - /tomcat/trunk/java/org/apache/tomcat/websocket/Utf8Decoder.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 19:45:44 2013 New Revision: 1451927 URL: http://svn.apache.org/r1451927 Log: 1100 10xx is invalid as it can be encoded in a single byte as 00xx Modified: tomcat/trunk/java/org/apache/tomcat/websocket/Utf8Decoder.java Modified: tomcat/trunk/java/org/

svn commit: r1451925 - /tomcat/trunk/java/org/apache/tomcat/websocket/Utf8Decoder.java

2013-03-02 Thread markt
Author: markt Date: Sat Mar 2 19:44:21 2013 New Revision: 1451925 URL: http://svn.apache.org/r1451925 Log: Better alignment to maker table easier to follow Modified: tomcat/trunk/java/org/apache/tomcat/websocket/Utf8Decoder.java Modified: tomcat/trunk/java/org/apache/tomcat/websocket/Utf8De

Re: OT: No web-jsptaglibrary_2_2.xsd?

2013-03-02 Thread Christopher Schultz
Nick, On 3/1/13 9:29 PM, Nick Williams wrote: > Perusing the Tomcat sources I noticed that there are JSP tag library > XSD files web-jsptaglibrary_1_1.xsd, web-jsptaglibrary_1_2.xsd, > web-jsptaglibrary_2_0.xsd and web-jsptaglibrary_2_1.xsd. However, the > JSP version that Tomcat currently support

[Bug 54618] Add filter implementing HTTP Strict Transport Security (HSTS)

2013-03-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=54618 --- Comment #6 from Christopher Schultz --- Is there a reason to implement this at the container level? Since it's a Filter, it can be installed directly into the web application. I think this protection is better done at the application le

Re: URIs, %nn decoding and error handling

2013-03-02 Thread Mark Thomas
On 01/03/2013 22:44, Remy Maucherat wrote: > About endOfInput, I wouldn't use it. The only place where it is somewhat > useful is the URI conversion, which can check the underflow flag and > throw an exception. Especially if you also want to have "perfect" body > decoding, you'll have to use that f

Re: URIs, %nn decoding and error handling

2013-03-02 Thread Mark Thomas
On 01/03/2013 22:39, Konstantin Kolinko wrote: > 1. I have not tested, but as proposed rejection happens in > CoyoteAdapter, I think it will happen too early for ErrorReportValve > to work. > > As such, a user will receive a response that consists of HTTP status > line only, which browsers disp

[Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-03-02 Thread Apache Wiki
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The "LocalBadContent" page has been changed by ChuckCaldarale: http://wiki.apache.org/tomcat/LocalBadContent?action=diff&rev1=75&rev2=76 social\.yahoo\.com\.np sprachstudium\.beeplo

[jira] [Updated] (MTOMCAT-212) Missing "skip" configuration option

2013-03-02 Thread Eugenio Santoboni (JIRA)
[ https://issues.apache.org/jira/browse/MTOMCAT-212?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eugenio Santoboni updated MTOMCAT-212: -- Attachment: 0001-Add-skip-configuration-option.patch I solved this issue with this pat

[jira] [Updated] (MTOMCAT-212) Missing "skip" configuration option

2013-03-02 Thread Eugenio Santoboni (JIRA)
[ https://issues.apache.org/jira/browse/MTOMCAT-212?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eugenio Santoboni updated MTOMCAT-212: -- Description: There isn't a "skip" parameter that allows developers to skip mojo execut

[jira] [Created] (MTOMCAT-212) Missing "skip" configuration option

2013-03-02 Thread Eugenio Santoboni (JIRA)
Eugenio Santoboni created MTOMCAT-212: - Summary: Missing "skip" configuration option Key: MTOMCAT-212 URL: https://issues.apache.org/jira/browse/MTOMCAT-212 Project: Apache Tomcat Maven Plugin

[jira] [Created] (MTOMCAT-212) Missing "skip" configuration option

2013-03-02 Thread Eugenio Santoboni (JIRA)
Eugenio Santoboni created MTOMCAT-212: - Summary: Missing "skip" configuration option Key: MTOMCAT-212 URL: https://issues.apache.org/jira/browse/MTOMCAT-212 Project: Apache Tomcat Maven Plugin

[Tomcat Wiki] Trivial Update of "XiomaraHo" by XiomaraHo

2013-03-02 Thread Apache Wiki
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The "XiomaraHo" page has been changed by XiomaraHo: http://wiki.apache.org/tomcat/XiomaraHo New page: Got nothing to write about myself at all.<> Nice to be here and a part of this site

[Bug 54628] there is something wrong when send binary data by websocket.

2013-03-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=54628 blee changed: What|Removed |Added Version|unspecified |7.0.37 Severity|normal

[Bug 54628] New: there is something wrong when send binary data by websocket.

2013-03-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=54628 Bug ID: 54628 Summary: there is something wrong when send binary data by websocket. Product: Tomcat 7 Version: unspecified Hardware: PC OS: Linux