Support SameSite cookie attribute in Tomcat

2018-06-07 Thread Mathuriga Thavarajah
Hi Tomcat Team, I have done a basic research on $Subject. The SameSite [1] [2] is a cookie attribute which is like HttpOnly and Secureflag. The SameSite cookie attribute instructs a browser not to send the cookie with cross-origin third-party requests and only send the cookie when we are using web

svn commit: r1833107 - /tomcat/native/trunk/xdocs/miscellaneous/changelog.xml

2018-06-07 Thread jfclere
Author: jfclere Date: Thu Jun 7 08:38:26 2018 New Revision: 1833107 URL: http://svn.apache.org/viewvc?rev=1833107&view=rev Log: Add the changelog for 1.2.17 Modified: tomcat/native/trunk/xdocs/miscellaneous/changelog.xml Modified: tomcat/native/trunk/xdocs/miscellaneous/changelog.xml URL:

[Bug 62437] New: Configurable strict validation on provided host name and port for Host Header

2018-06-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62437 Bug ID: 62437 Summary: Configurable strict validation on provided host name and port for Host Header Product: Tomcat 8 Version: 8.5.31 Hardware: PC OS: Ma

[Bug 62371] Improve logging in AbstractProcessor.parseHost()

2018-06-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62371 Mark Thomas changed: What|Removed |Added CC||andresgsei...@gmail.com --- Comment #29

[Bug 62437] Configurable strict validation on provided host name and port for Host Header

2018-06-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62437 Mark Thomas changed: What|Removed |Added Resolution|--- |DUPLICATE Status|NEW

svn commit: r1833112 - /tomcat/native/trunk/download_deps.sh

2018-06-07 Thread jfclere
Author: jfclere Date: Thu Jun 7 09:07:16 2018 New Revision: 1833112 URL: http://svn.apache.org/viewvc?rev=1833112&view=rev Log: download latest versions. Modified: tomcat/native/trunk/download_deps.sh Modified: tomcat/native/trunk/download_deps.sh URL: http://svn.apache.org/viewvc/tomcat/n

Re: Support SameSite cookie attribute in Tomcat

2018-06-07 Thread Mark Thomas
On 07/06/18 08:20, Mathuriga Thavarajah wrote: > Hi Tomcat Team, > > I have done a basic research on $Subject. The SameSite [1] [2] is a cookie > attribute which is like HttpOnly and Secureflag. The SameSite cookie > attribute instructs a browser not to send the cookie with cross-origin > third-pa

svn commit: r1833113 - in /tomcat/native/tags/TOMCAT_NATIVE_1_2_17: ./ build.properties.default native/include/tcn_version.h

2018-06-07 Thread jfclere
Author: jfclere Date: Thu Jun 7 09:30:12 2018 New Revision: 1833113 URL: http://svn.apache.org/viewvc?rev=1833113&view=rev Log: Tag 1.2.17 Added: tomcat/native/tags/TOMCAT_NATIVE_1_2_17/ - copied from r1833112, tomcat/native/trunk/ Modified: tomcat/native/tags/TOMCAT_NATIVE_1_2_17/

svn commit: r27300 - in /dev/tomcat/tomcat-connectors/native/1.2.17: ./ binaries/ sources/

2018-06-07 Thread jfclere
Author: jfclere Date: Thu Jun 7 11:37:55 2018 New Revision: 27300 Log: Commit the sources for 1.2.17 Added: dev/tomcat/tomcat-connectors/native/1.2.17/ dev/tomcat/tomcat-connectors/native/1.2.17/binaries/ dev/tomcat/tomcat-connectors/native/1.2.17/sources/ dev/tomcat/tomcat-conn

svn commit: r27306 - /dev/tomcat/tomcat-connectors/native/1.2.17/binaries/

2018-06-07 Thread jfclere
Author: jfclere Date: Thu Jun 7 15:36:46 2018 New Revision: 27306 Log: Add the binary asc gpg and md5. Added: dev/tomcat/tomcat-connectors/native/1.2.17/binaries/tomcat-native-1.2.17-ocsp-win32-bin.zip (with props) dev/tomcat/tomcat-connectors/native/1.2.17/binaries/tomcat-native-1.

svn commit: r27307 - in /dev/tomcat/tomcat-connectors/native/1.2.17/sources: tomcat-native-1.2.17-src.tar.gz.md5 tomcat-native-1.2.17-win32-src.zip.md5

2018-06-07 Thread jfclere
Author: jfclere Date: Thu Jun 7 15:38:03 2018 New Revision: 27307 Log: add missing md5 files. Added: dev/tomcat/tomcat-connectors/native/1.2.17/sources/tomcat-native-1.2.17-src.tar.gz.md5 dev/tomcat/tomcat-connectors/native/1.2.17/sources/tomcat-native-1.2.17-win32-src.zip.md5 Added:

[VOTE] Release Apache Tomcat Native 1.2.17

2018-06-07 Thread jean-frederic clere
Version 1.2.17 includes the following changes compared to 1.2.16: - Windows binaries built with OpenSSL 1.0.2o and APR 1.6.3 Various other fixes and improvements. See the changelog for details. The proposed release artefacts can be found at [1], and the build was done using tag [2]. The Apache

Re: [VOTE] Release Apache Tomcat Native 1.2.17

2018-06-07 Thread Mark Thomas
On 07/06/18 16:50, jean-frederic clere wrote: > Version 1.2.17 includes the following changes compared to 1.2.16: > > - Windows binaries built with OpenSSL 1.0.2o and APR 1.6.3 > > Various other fixes and improvements. See the changelog for details. > > The proposed release artefacts can be foun