Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-11 Thread Christopher Schultz
Michael, On 6/7/24 10:18, Michael Osipov wrote: On 2024/06/07 12:54:44 Christopher Schultz wrote: Michael, On 6/7/24 08:01, Michael Osipov wrote: On 2024/06/07 08:05:34 Mark Thomas wrote: On 06/06/2024 16:30, Christopher Schultz wrote: All, Resurrecting this thread from 2019. I'd like to

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-08 Thread Rémy Maucherat
On Mon, Oct 7, 2019 at 4:46 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them > are unnecessarily sharp and may

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Michael Osipov
On 2024/06/07 12:54:44 Christopher Schultz wrote: > Michael, > > On 6/7/24 08:01, Michael Osipov wrote: > > On 2024/06/07 08:05:34 Mark Thomas wrote: > >> On 06/06/2024 16:30, Christopher Schultz wrote: > >>> All, > >>> > >>> Resurrecting this thread from 2019. > >>> > >>> I'd like to remove the

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Christopher Schultz
Michael, On 6/7/24 08:01, Michael Osipov wrote: On 2024/06/07 08:05:34 Mark Thomas wrote: On 06/06/2024 16:30, Christopher Schultz wrote: All, Resurrecting this thread from 2019. I'd like to remove the SSI configuration from conf/web.xml and put it into webapps/docs/ssi-howto.html. Are ther

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Michael Osipov
On 2024/06/07 08:05:34 Mark Thomas wrote: > On 06/06/2024 16:30, Christopher Schultz wrote: > > All, > > > > Resurrecting this thread from 2019. > > > > I'd like to remove the SSI configuration from conf/web.xml and put it > > into webapps/docs/ssi-howto.html. > > > > Are there any objections?

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-07 Thread Mark Thomas
On 06/06/2024 16:30, Christopher Schultz wrote: All, Resurrecting this thread from 2019. I'd like to remove the SSI configuration from conf/web.xml and put it into webapps/docs/ssi-howto.html. Are there any objections? None here. Do we want to go further and consider removing it entirely

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2024-06-06 Thread Christopher Schultz
All, Resurrecting this thread from 2019. I'd like to remove the SSI configuration from conf/web.xml and put it into webapps/docs/ssi-howto.html. Are there any objections? Thanks, -chris On 10/29/19 05:05, Konstantin Kolinko wrote: пн, 28 окт. 2019 г. в 16:34, Christopher Schultz : [...]

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-29 Thread Konstantin Kolinko
пн, 28 окт. 2019 г. в 16:34, Christopher Schultz : > > [...] > > The stock conf/web.xml contains a sample configuration for the SSI > servlet. We will have to decide what to do with that. I can think of > at least two options: > > a. Remove it from the stock conf/web.xml entirely > b. Add comme

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 10/28/19 16:30, Mark Thomas wrote: > On 28/10/2019 15:23, Christopher Schultz wrote: > > > >>> i. Modify files.catalina in build.xml to the >>> org.apache.catalina.ssi package ii. Modify the "package" target >>> in build.xml to with

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-28 Thread Mark Thomas
On 28/10/2019 15:23, Christopher Schultz wrote: >> i. Modify files.catalina in build.xml to the >> org.apache.catalina.ssi package ii. Modify the "package" target in >> build.xml to with the >> appropriate classes >> >> I think this is super simple to do and we should go ahead and do >> this

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 10/28/19 09:34, Christopher Schultz wrote: > 2. Separating the packaging should be easy. Note that I haven't > actually done this: > > i. Modify files.catalina in build.xml to the > org.apache.catalina.ssi package ii. Modify the "packag

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rémy, On 10/28/19 09:51, Rémy Maucherat wrote: > On Mon, Oct 28, 2019 at 2:34 PM Christopher Schultz > > wrote: > > All, > > Note: this was not a vote. > > The consensus seems to be that SSIs should be moved

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-28 Thread Rémy Maucherat
On Mon, Oct 28, 2019 at 2:34 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > Note: this was not a vote. > > The consensus seems to be that SSIs should be moved into a separate > JAR file. > > I've done a *very* short in

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Note: this was not a vote. The consensus seems to be that SSIs should be moved into a separate JAR file. I've done a *very* short investigation, and I have discovered the following: 1. Tomcat builds fine after removing the entire org.apache.

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-08 Thread Rainer Jung
Am 07.10.2019 um 20:01 schrieb Rémy Maucherat: On Mon, Oct 7, 2019 at 4:46 PM Christopher Schultz mailto:ch...@christopherschultz.net>> wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-07 Thread Emmanuel Bourg
>> Yes, basically I think we should remove both CGI and SSI, *but* actually >> keep them in a separate JAR. For CGI this is harder as it is directly in >> the servlets package, so it would have to be moved to servlets.cgi for >> Tomcat 10. +1, these things could be modularized and shared between

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-07 Thread Rémy Maucherat
On Mon, Oct 7, 2019 at 4:46 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them > a

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-07 Thread Igal Sapir
On 10/7/2019 7:46 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp edges" present in Tomcat. Some of them are unnecessarily sharp and may be actually unnecessary

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-07 Thread Coty Sutherland
On Mon, Oct 7, 2019 at 10:46 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them >

Re: [PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-07 Thread Mark Thomas
> All, > > I recently gave a presentation on locking-down Apache Tomcat[1] and I > briefly discussed the "sharp edges" present in Tomcat. Some of them > are unnecessarily sharp and may be actually unnecessary. I'm going to > make a few proposals to remove functions from Tomcat. > > Proposal: Remo

[PROPOSAL] Tomcat 10: Remove Server-Side Includes (SSI)

2019-10-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I recently gave a presentation on locking-down Apache Tomcat[1] and I briefly discussed the "sharp edges" present in Tomcat. Some of them are unnecessarily sharp and may be actually unnecessary. I'm going to make a few proposals to remove funct