Patches to fix the minor XSS issues in the examples are below.
I would be grateful if someone with jakarta-servletapi-5 karama could
commit these.
Cheers,
Mark
Index: jsr152/examples/jsp2/el/functions.jsp
===
RCS file:
Hi,
The attached file is to update the web-app_2_4.xsd according
to the JSR154 maintenance release.
jsr154/src/share/dtd/web-app_2_4.xsd
o The restriction facet of mime-typeType should be updated
from:-
xsd:pattern value=[\p{L}\-\p{Nd}]+/[\p{L}\-\p{Nd}\.]+/
to:-
forgot to attach...
sorry,
Yutaka Yoshida
Sun Microsystems, Inc.
Original Message
Subject: [PATCH] jakarta-servletapi-5 schema update
Date: Tue, 15 Jun 2004 14:56:09 -0700
From: Yuta Yoshida [EMAIL PROTECTED]
Organization: Sun Microsystems
To: [EMAIL PROTECTED]
CC: [EMAIL
This fixes an ArrayIndexOutOfBoundsException when superclass does
not declare any methods (see Bugtraq 4968841).
Jan
[EMAIL PROTECTED]'s password:
Warning: Remote host denied X11 forwarding, perhaps xauth program could not be run on
the server side.
Index:
I received a number of updates for Spanish translations from
Jesús Marín. This new file and diff are ones I don't have
karma to commit. If someone who does would commit these,
I would appreciate it. Since I'm working on Windows, these
contain CRLF. Please fix if you are committing from *nix.
] jakarta-servletapi-5 jsr154 Spanish resource strings
I received a number of updates for Spanish translations from
Jesús Marín. This new file and diff are ones I don't have
karma to commit. If someone who does would commit these,
I would appreciate it. Since I'm working on Windows, these
contain
Patch is attached.
Also, please update jstl.jar and standard.jar in
jakarta-servletapi-5/jsr152/examples/WEB-INF/lib
with their JSTL-1.1 counterparts from
http://www.tux.org/pub/net/apache/dist/jakarta/taglibs/standard/binaries/
Thanks!
Jan
Executing ssh-askpass to query the password...
The attached file is to update the
servlet2.4 deployment descriptor schema
jsr154/src/share/dtd/web-app_2_4.xsd
Update the 'year' in the copyright
thank you,
yutaka yoshida
Sun Microsystems, Inc.
Index: jsr154/src/share/dtd/web-app_2_4.xsd
Attached is a patch to the TLD schema to remove a superfluous definition
for the xml prefix.
jsr152/src/share/dtd/web-jsptaglibrary_2_0.xsd
- Removed superfluous xml namespace
---
Mark Roth, Java Software
JSP 2.0 Co-Specification Lead
Sun Microsystems, Inc.
Index:
There were reports of the View Source option not working for the JSP
examples in some versions of IE. Apparently some configurations of IE
will process the HTML tags in text files instead of rendering them as
text. I've made the following enhancements:
* Created new ant task Txt2Html that
Hi,
The attached file is to update the servlet2.4 API.
jsr154/src/share/javax/servlet/ServletRequest.java
Fix the confusing description in getServerName()
and getServerPort() - change host header to
host header value.
thank you,
yutaka yoshida
Sun Microsystems, Inc.
Index:
Attached is a patch to update the J2EE 1.4 schema.
jsr154/src/share/dtd/j2ee_1_4.xsd
- clarify that fully-qualified-classType is a binary name
---
Mark Roth, Java Software
JSP 2.0 Co-Specification Lead
Sun Microsystems, Inc.
Index: jsr154/src/share/dtd/j2ee_1_4.xsd
Hi,
The attached file is to update the Servlet 2.4 API.
Changes are synchronizing with the latest specification
and fixing a typo and a bad indentation. All semantics
stay the same.
o Fix typo and indentation:
jsr152/src/share/javax/servlet/jsp/tagext/IterationTag.java
- Clarified that doAfterBody() is not called if there is no body.
---
Mark Roth, Java Software
JSP 2.0 Co-Specification Lead
Sun Microsystems, Inc.
Index: jsr152/src/share/javax/servlet/jsp/tagext/IterationTag.java
Hi,
The attached file is to fix the bug in the Servlet 2.4
deployment descriptor schema file.
jsr154/share/dtd/web-app_2_4.xsd
The name in xsd:key,xsd:keyref, and xsd:unique
must be unique within the j2ee namespace.
Thank you,
Yutaka Yoshida
Sun Microsystems
Index:
jsr152/src/share/javax/servlet/jsp/tagext/TagInfo.java
- Fixed incorrect clarification of getVariableInfo(). The original
semantics requiring special treatment of the id attribute
were supposed to have been removed in JSP 1.2. We brought them
back to life in JSP 2.0, but
The following is a patch to the JSP 2.0 TLD and J2EE 1.4 schemas based
on recent specification changes.
jsr154/src/share/dtd/web-jsptaglibrary_2_0.xsd
jsr152/src/share/dtd/web-jsptaglibrary_2_0.xsd
- Made body-content element mandatory since default valid
is unusable for Simple Tag
Slight additional clarification to TLD.
jsr154/src/share/dtd/web-jsptaglibrary_2_0.xsd
jsr152/src/share/dtd/web-jsptaglibrary_2_0.xsd
- Clarified that body-content is not just a hint
- Reformatted description for body-content with smaller margins
for spec
---
Mark Roth, Java
The following patch includes an API update from the JSP 2.0 specification.
jsr152/src/share/javax/servlet/jsp/tagext/SimpleTag.java:
- Clarified javadocs for setJspContext()
jsr152/src/share/javax/servlet/jsp/tagext/SimpleTagSupport.java:
- Clarified javadocs for setJspContext()
Hi,
(B
(BThe attached file is to update the Servlet 2.4 API.
(BChanges are:
(B
(B* Fix typos
(B
(B jsr154/src/share/javax/servlet/Filter.java
(B jsr154/src/share/javax/servlet/FilterConfig.java
(B jsr154/src/share/javax/servlet/ServletConfig.java
(B
Here are the latest round of JSP 2.0 API updates. Some changes will
need to be made to jakarta-commons-sandbox/el before applying this patch.
I also made a couple of changes to the JSP 2.0 examples in accordance
with these changes.
jsr152/src/share/dtd/jsp_2_0.xsd:
Hi,
The attached patch is to update the Servlet 2.4 API as follows:
1) Add @since 2.4 into the added methods in:
jsr154/src/share/javax/servlet/ServletRequest.java
jsr154/src/share/javax/servlet/ServletRequestWrapper.java
jsr154/src/share/javax/servlet/ServletResponse.java
Quick patch to improve JSP 2.0 EL examples:
* Added example of conditional operator ${(1==2) ? 3 : 4}
Commented out, since this is not yet implemented.
* Changed quoting from old-style ${'${'} 1 + 2 }
to new-style \${ 1 + 2 }
---
Mark Roth, Java Software
JSP 2.0
Hi,
The attached file is updates to the Servlet 2.4 API and XML Schema.
Changes are:
jsr154/src/share/dtd/web-app_2_4.xsd
- Arbitrary order of sub elements under web-app
- Reformatted indentation
jsr154/src/share/javax/servlet/ServletContext.java
- Change 2.3 to 2.4 in
/jsr152/src/share/javax/servlet/jsp/JspContext.java:
- Added throws clause for NullPointerException for null
name parameter to the following methods:
findAttribute( name )
removeAttribute( name )
removeAttribute( name, scope )
getAttributesScope(
Attached are updates to the JSP 2.0 API and XML Schema files, in gzipped
format (was too large for tomcat-dev in raw form).
/jsr152/src/share/javax/servlet/jsp/JspContext.java
- Added throws clause for IllegalArgumentException to setAttribute()
for when PageContext.SESSION_SCOPE is
jsr152/src/share/javax/servlet/jsp/tagext/SkipPageException.java
- Made clear that this should not be thrown from within a tag file.
jsr152/src/share/dtd/web-jsptaglibrary_2_0.xsd:
jsr154/src/share/dtd/web-jsptaglibrary_2_0.xsd:
- Added some useful subelements to tag-file element:
*
Javadoc enhancements for JSP 2.0 API.
New Files (attached separately):
- jsr152/src/share/javax/servlet/jsp/package.html
- jsr152/src/share/javax/servlet/jsp/el/package.html
- jsr152/src/share/javax/servlet/jsp/tagext/package.html
jsr152/src/share/javax/servlet/jsp/JspContext.java
Final API patch before PFD2 release of JSP 2.0 specification.
jsr152/src/share/dtd/web-jsptaglibrary_2_0.xsd
- Updated description for function-signature element
jsr154/src/share/dtd/web-jsptaglibrary_2_0.xsd
- Updated description for function-signature element
Small patch to fix some javadocs.
Modified File:
jsr152/src/share/javax/servlet/jsp/tagext/BodyTag.java
- Mark
Index: jsr152/src/share/javax/servlet/jsp/tagext/BodyTag.java
===
RCS file:
Attached are some fixes leading up to our second proposed final draft
release of the specification. Please let me know if there are any
questions or concerns.
jsr152/src/share/dtd/jsp_2_0.xsd
- Updated comments for jsp-property-groupType
jsr154/src/share/dtd/jsp_2_0.xsd
- Updated comments
Attached are a set of API patches leading up to PFD2 of the
specification. Look for a corresponding patch to jakarta-tomcat-jasper
to bring it up to date with these APIs.
Also note the attached replacement for TagProtocol.gif.
Here is another set of JSP 2.0 API changes and clarifications, based on
feedback from various sources. Please let me know if there are any
questions or concerns.
jsr152/src/share/javax/servlet/jsp/JspContext.java
- Clarified that removeAttribute( name ) removes from all scopes
- Clarified
Here is a patch with some more javadoc clarifications, to make the API
more testable. Thanks go to Ryan Lubke for helping out!
As always, please let me know if there are any questions or concerns.
Change summary:
---
jsr152/src/share/javax/servlet/jsp/tagext/VariableInfo.java
-
This is a rather large patch to the API workspace. Much of it is
cosmetic changes and tightening of the javadocs so that the APIs are
more testable. We also removed some newer APIs we don't need anymore.
Ryan Lubke helped with some of these changes. Thanks, Ryan!
No files added or deleted.
Update to clarify return values of TagVariableInfo.
- getClassName() will return java.lang.String if
the variable-class element is not specified.
- getDeclare() will return true if the declare
element is not specified.
- getScope() will return NESTED as the scope if
scope is not
Please use the attached patch instead of the one I previously posted.
Changes
TagVariableInfo
- getClassName() will return java.lang.String if
the variable-class element is not specified.
- getDeclare() will return true if the declare
element is not
NOTE: This patch requires some changes to Jasper2 before committing.
Please let me know if there are any questions or concerns.
jsr152/src/share/javax/serlvet/jsp/el/Expression.java
- Removed null as a return value for error - method must throw an
exception to signal an error.
jsr152/src/share/javax/servlet/jsp/el/ExpressionEvaluator.java:
- Removed null as a valid return type for parseExpression() and
evaluate(). These methods must throw an ELException in
this case.
jsr154/src/share/dtd/j2ee_1_4.xsd:
- Added jndiEnvironmentRefsGroup
NEW FILE (in jakarta-servletapi-5.newfiles.tar):
- jsr154/src/share/dtd/j2ee_web_services_1_1.xsd
(Required by latest j2ee_1_4.xsd)
CHANGED FILES:
jsr152/src/share/javax/servlet/jsp/JspContext.java:
- getAttribute(name): Remove IllegalArgumentException
for non-existent
Attached is a patch to bring the other Servlet 2.4 XSD files up to date
with the JSP patch I submitted on September 19.
Files modified:
- jsr154/src/share/dtd/j2ee_1_4.xsd
- jsr154/src/share/dtd/web-app_2_4.xsd
- jsr154/src/share/dtd/xml.xsd
--
Mark Roth, Java Software
JSP 2.0
I just noticed my previous XSD patch from this Monday was never
applied. Was there a problem?
This patch contains diffs based on the current workspace state, not
based on my previous patch.
This patch contains another few patches to the XSD files. This affects
both jsp_2_0.xsd and
This time, with the patch. :)
- Mark
On Thu, 2002-09-19 at 19:36, Mark Roth wrote:
I just noticed my previous XSD patch from this Monday was never
applied. Was there a problem?
This patch contains diffs based on the current workspace state, not
based on my previous patch.
This patch
Forgot to tar a subdirectory (thanks to Justy for spotting this!):
This patch adds the following files:
* jsr152/examples/WEB-INF/tags/panel.tag
* jsr152/examples/WEB-INF/tags/helloWorld.tag
* jsr152/examples/WEB-INF/tags/displayProducts.tag
As usual, please let me know
Oops - did cvs diff instead of cvs diff -u. Here's a better version
of the patch. Please use this instead.
On Fri, 2002-09-06 at 20:15, Mark Roth wrote:
Greetings,
Attached is a patch to the jakarta-servletapi-5 workspace with various
examples that exercise new features in JSP 2.0. I've
Attached is a bugfix for 11884: getParent in a SimpleTag implementation
returns a Tag.
TagAdapter now works as per the spec.
Files modified:
jsr152/src/share/javax/servlet/jsp/tagext/TagAdapter.java
--
Mark Roth, Java Software
Co-Specification Lead for JSP 2.0
Sun Microsystems, Inc.
Patch to the XML Schema to accept the new is-xml element. Eduardo and
I forgot to add it before PFD.
- Mark
Index: jsr152/src/share/dtd/jsp_2_0.xsd
===
RCS file:
The attached patch contains the latest fix of
servlet 2.4 deployment descriptor, web-app_2_4.xsd.
+ change xsd:string to j2ee:string
+ element locale-encoding-mapping-list moved up before
the element deployment-extension
Thank you,
Yutaka Yoshida
Java/XML Software Group
Sun Microsystems
Hi , attached is the remaining XML schema that need to be available locally.
src/share/dtd/j2ee_1_4.xsd
src/share/dtd/web-app_2_4.xsd
src/share/dtd/jsp_2_0.xsd
src/share/dtd/jsptaglibrary_2_0.xsd
Thanks,
-- Jeanfrancois
jakarta-servletapi- 5_localschema.zip
Description: Zip
Jean-François,
These are already in the jakarta-servletapi-5 workspace and will be
available in servlet.jar with the patch to
jakarta-servletapi-5/build.xml that I posted last night.
So, this patch should *not* be applied.
Patrick
Jean-francois Arcand wrote:
Hi , attached is the remaining
Hi,
this include a modified version of xml.xsd (from W3c) were the DOCTYPE
element is removed (commented). Xerces 2.0.1 seems to have problem with
this entity when schema is used and the parser is running inside a
firewall, using a local copy of the xml.xsd.
Thanks,
-- Jeanfrancois
The attached archive contains three files that should be added to
jakarta-servletapi-5 to enable parsing of DDs and TLDs without needing
to fetch these schemas from their global URL each time. Contains:
src/share/dtd/xml.xsd
src/share/dtd/XMLSchema.dtd
src/share/dtd/datatypes.dtd
Please apply the attached patch. It adds all of the new *.xsd files to
the servlet.jar.
Also, please cvs remove the following file as it does not appear to be used:
src/share/dtd/web-app_2_3.dtd.backup
Thanks,
Patrick
--
Attached is a patch that updates all of the Servlet 2.3 references to
Servlet 2.4 and JSP 1.2 references to JSP 2.0.
Can someone with commit access to the jakarta-servletapi-5 repository
please commit this patch?
Thanks,
Patrick
--
This patch adds support for Servlet 2.4 servlet request events. These
are new files so there's no diff.
Untar the patch in your jakarta-servletapi-5 directory. Contents of
the tar file:
src/share/javax/servlet/ServletRequestListener.java
55 matches
Mail list logo
