[tomcat] branch 8.5.x updated: Add POJO support to programmatic http -> ws upgrade

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 537dbcc Add POJO support to programmatic http ->

[tomcat] branch 9.0.x updated: Add POJO support to programmatic http -> ws upgrade

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new c6c8c05 Add POJO support to programmatic http ->

[tomcat] branch 10.0.x updated: Add POJO support to programmatic http -> ws upgrade

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 2338ef3 Add POJO support to programmatic http

[tomcat] branch main updated: Add POJO support to programmatic http -> ws upgrade

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 28b6cec Add POJO support to programmatic http -> ws

[Bug 65736] Improve org.apache.naming.factory.BeanFactory to mitigate JNDI injection

2021-12-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65736 --- Comment #10 from Mark Thomas --- (In reply to Remy Maucherat from comment #8) > No idea. But the BeanFactory doesn't use our IntrospectionUtils, as you just > said, and we're totally used to its very user friendly behavior. Doh! Of

[Bug 65736] Improve org.apache.naming.factory.BeanFactory to mitigate JNDI injection

2021-12-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65736 --- Comment #9 from Christopher Schultz --- (In reply to Mark Thomas from comment #7) > 1. Has anyone got a suggestion to make enabling forceString support > configurable that doesn't involve a system property? JNDI environment variable? (lol

[Bug 65736] Improve org.apache.naming.factory.BeanFactory to mitigate JNDI injection

2021-12-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65736 --- Comment #8 from Remy Maucherat --- (In reply to Mark Thomas from comment #7) > Looking at this in a bit more detail I have a couple of > observations/questions: > > 1. Has anyone got a suggestion to make enabling forceString support >

[Bug 65736] Improve org.apache.naming.factory.BeanFactory to mitigate JNDI injection

2021-12-15 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65736 --- Comment #7 from Mark Thomas --- Looking at this in a bit more detail I have a couple of observations/questions: 1. Has anyone got a suggestion to make enabling forceString support configurable that doesn't involve a system property? 2.

svn commit: r1895980 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml

2021-12-15 Thread markt
Author: markt Date: Wed Dec 15 11:15:46 2021 New Revision: 1895980 URL: http://svn.apache.org/viewvc?rev=1895980=rev Log: Add CVE-2021-44228 to the 'Not a vulnerability in Tomcat' section Modified: tomcat/site/trunk/docs/security-10.html tomcat/site/trunk/docs/security-8.html

[tomcat] branch 8.5.x updated: Fix typo (spotted by rjung)

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 36037f7 Fix typo (spotted by rjung) 36037f7 is

[tomcat] branch 9.0.x updated: Fix typo (spotted by rjung)

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 465f7fb Fix typo (spotted by rjung) 465f7fb is

[tomcat] branch 10.0.x updated: Fix typo (spotted by rjung)

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new a4219bd Fix typo (spotted by rjung) a4219bd is

[tomcat] branch main updated: Fix typo (spotted by rjung)

2021-12-15 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 302fcea Fix typo (spotted by rjung) 302fcea is