Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

On Thu, Jun 6, 2024 at 4:40 PM Christopher Schultz wrote: > > All, > > Resurrecting this thread from 2019. > > I will be proceeding with this 4.5-year-old plan to extract the CGI > servlet to a separate JAR file to make it easy to "remove" from Tomcat > if operators would prefer to do such things.

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

On 06/06/2024 16:39, Christopher Schultz wrote: All, Resurrecting this thread from 2019. I will be proceeding with this 4.5-year-old plan to extract the CGI servlet to a separate JAR file to make it easy to "remove" from Tomcat if operators would prefer to do such things. I think I'll also

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

All, Resurrecting this thread from 2019. I will be proceeding with this 4.5-year-old plan to extract the CGI servlet to a separate JAR file to make it easy to "remove" from Tomcat if operators would prefer to do such things. I think I'll also move the configuration from conf/web.xml to weba

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Note: this was not a vote. There was very little feedback, and responses were mixed. We got exactly one response on the users@ list about real-world usage of CGI, so we cannot draw any conclusions about real-world uses. Otherwise, the consens

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

Am 07.10.2019 um 18:37 schrieb Igal Sapir: On 10/7/2019 8:14 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 10/7/19 11:10, Mark Thomas wrote: All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp edges

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

On 10/7/2019 8:14 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 10/7/19 11:10, Mark Thomas wrote: All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp edges" present in Tomcat. Some of them are unnece

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 10/7/19 11:10, Mark Thomas wrote: >> All, >> >> I recently gave a presentation on locking-down Apache Tomcat[1] >> and I briefly discussed the "sharp edges" present in Tomcat. Some >> of them are unnecessarily sharp and may be actually unne

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Coty, On 10/7/19 11:02, Coty Sutherland wrote: > On Mon, Oct 7, 2019 at 11:00 AM Christopher Schultz > > wrote: > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and > I briefly discus

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

> All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them > are unnecessarily sharp and may be actually unnecessary. I'm going to > make a few proposals to remove functions from Tomcat. > > Proposal: Remo

Re: [PROPOSAL] Tomcat 10: Remove CGI Servlet

On Mon, Oct 7, 2019 at 11:00 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them >

[PROPOSAL] Tomcat 10: Remove CGI Servlet

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp edges" present in Tomcat. Some of them are unnecessarily sharp and may be actually unnecessary. I'm going to make a few proposals to remove funct