[Bug 63867] Add option for reason phrase

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63867 --- Comment #2 from Ken DeLong --- It's FAR more convenient to run Boot apps with the embedded container. Our whole infrastructure is set up that way. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 63867] Add option for reason phrase

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63867 --- Comment #1 from Michael Osipov --- The documentation says: You can also deploy Spring Boot applications to any Servlet 3.1+ compatible container. Does that not work? What is wrong to deploy a Spring app as WAR file to Tomcat? -- You are

[Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 --- Comment #14 from Mike Smith --- Hello Mark, does this issue fixed already? Or any source? Thanks Mike S. http://www.insolvencyhelpline.co.uk/; -- You are receiving this mail because: You are the assignee for the bug.

buildbot failure in on tomcat-trunk

2019-10-18 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-trunk while building tomcat. Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/4682 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: asf946_ubuntu Build Reason: The AnyBranchScheduler

[Bug 63867] New: Add option for reason phrase

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63867 Bug ID: 63867 Summary: Add option for reason phrase Product: Tomcat 9 Version: 9.0.x Hardware: All OS: All Status: NEW Severity: enhancement

[Bug 63825] Http11Processor does not compare request header values for complete tokens

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63825 --- Comment #4 from Michael Osipov --- (In reply to Mark Thomas from comment #3) > Thanks for catching that. I've refactored the code a little and expanded it > to cover the request header case. > > Performance testing indicates neutral to

[Bug 63825] Http11Processor does not compare request header values for complete tokens

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63825 Mark Thomas changed: What|Removed |Added Status|REOPENED|RESOLVED Resolution|---

[tomcat] branch 7.0.x updated: Additional fix for https://bz.apache.org/bugzilla/show_bug.cgi?id=63825

2019-10-18 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 7.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/7.0.x by this push: new 872f0a3 Additional fix for

[GitHub] [tomcat] Heesenp opened a new pull request #215: fixed typos and grammatical errors

2019-10-18 Thread GitBox
Heesenp opened a new pull request #215: fixed typos and grammatical errors URL: https://github.com/apache/tomcat/pull/215 This is an automated message from the Apache Git Service. To respond to the message, please log on to

[tomcat] branch 8.5.x updated: Additional fix for https://bz.apache.org/bugzilla/show_bug.cgi?id=63825

2019-10-18 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new c77c089 Additional fix for

[tomcat] branch master updated: Additional fix for https://bz.apache.org/bugzilla/show_bug.cgi?id=63825

2019-10-18 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 46ebe8b Additional fix for

[Bug 63824] Http11Processor does not compare Connection header value case-insensitively

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63824 --- Comment #8 from Michael Osipov --- Indeed, my bad. Thanks for double-checking! Wouldn't is more reasonble to use isConnectionToken()? -- You are receiving this mail because: You are the assignee for the bug.

[Bug 63824] Http11Processor does not compare Connection header value case-insensitively

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63824 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|REOPENED

Re: [VOTE] Private branches in the official Tomcat git repository

2019-10-18 Thread Michael Osipov
Am 2019-10-18 um 16:12 schrieb Rémy Maucherat: On Fri, Oct 11, 2019 at 4:20 PM Rémy Maucherat wrote: Hi, This vote is to regulate the use of branches in the official Tomcat repository beyond branches that are approved by the community such as 8.5.x and 7.0.x. It is possible to do development

[Bug 63865] Cookie Attribute SameSite=None is default to unset in Chrome browser

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63865 --- Comment #1 from Prakash Saraf --- Google Chrome will also default all cookies without "SameSite" attribute to "Samesite=LAX" effective from Chrome v80. So, its important that if the value is set to NONE, tomcat does honor that and put

[Bug 63859] AJP cping/cpong mode failing on Tomcat 9.x

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63859 --- Comment #6 from Aurelien Pernoud --- Tomcat 8.0.x -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail:

[Bug 63865] New: Cookie Attribute SameSite=None is default to unset in Chrome browser

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63865 Bug ID: 63865 Summary: Cookie Attribute SameSite=None is default to unset in Chrome browser Product: Tomcat 8 Version: 8.5.x-trunk Hardware: PC OS: Mac

buildbot success in on tomcat-85-trunk

2019-10-18 Thread buildbot
The Buildbot has detected a restored build on builder tomcat-85-trunk while building tomcat. Full details are available at: https://ci.apache.org/builders/tomcat-85-trunk/builds/1986 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: asf946_ubuntu Build Reason: The

[Bug 63859] AJP cping/cpong mode failing on Tomcat 9.x

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63859 --- Comment #5 from Christopher Schultz --- (In reply to Aurelien Pernoud from comment #3) > Tomcat 7&8 Is this Tomcat 8.0.x or Tomcat 8.5.x? -- You are receiving this mail because: You are the assignee for the bug.

[Bug 63860] Error 401 with TLSv1.3 and auth-method CLIENT-CERT

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63860 --- Comment #2 from Christopher Schultz --- (In reply to Mark Thomas from comment #1) > (use OpenSSL or drop-back to TLS 1.2). Clarification: does NIO+OpenSSL+TLSv1.3 work, here, or is the APR connector required? -- You are receiving this

[tomcat] branch 8.5.x updated: Minor optimisation - add new line to access log message outside the sync

2019-10-18 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 801fc70 Minor optimisation - add new line to

[tomcat] branch master updated: Minor optimisation - add new line to access log message outside the sync

2019-10-18 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new b8cc215 Minor optimisation - add new line to

Re: [VOTE] Private branches in the official Tomcat git repository

2019-10-18 Thread Rémy Maucherat
On Fri, Oct 11, 2019 at 4:20 PM Rémy Maucherat wrote: > Hi, > > This vote is to regulate the use of branches in the official Tomcat > repository beyond branches that are approved by the community such as 8.5.x > and 7.0.x. It is possible to do development in private branches directly in > the

Re: Questions ad JSP/Jasper implementation in Tomcat ...

2019-10-18 Thread Rony G. Flatscher (Apache)
On 18.10.2019 13:32, Rony G. Flatscher (Apache) wrote: > Thank you very much for your remarks and pointers, Mark! > > ---rony > > P.S.: Not sure as of yet, what scope it should be. The idea would be to allow > any of the Java script > languages to be used. Currently the naive assumption is that

Re: Questions ad JSP/Jasper implementation in Tomcat ...

2019-10-18 Thread Rony G. Flatscher (Apache)
Thank you very much for your remarks and pointers, Mark! ---rony P.S.: Not sure as of yet, what scope it should be. The idea would be to allow any of the Java script languages to be used. Currently the naive assumption is that one could redirect the script's stdout to the servlet's 'out'

[Bug 63864] Use new TokenList parser for Http11Processor Transfer-Encoding handling

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63864 Michael Osipov changed: What|Removed |Added CC||micha...@apache.org -- You are

[Bug 63864] New: Use new TokenList parser for Http11Processor Transfer-Encoding handling

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63864 Bug ID: 63864 Summary: Use new TokenList parser for Http11Processor Transfer-Encoding handling Product: Tomcat 9 Version: 9.0.x Hardware: All OS: All

[Bug 63825] Http11Processor does not compare request header values for complete tokens

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63825 Michael Osipov changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|FIXED

[Bug 63824] Http11Processor does not compare Connection header value case-insensitively

2019-10-18 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63824 Michael Osipov changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|FIXED