Re: CGI support servlet (TC 4) -- feedback wanted

2001-04-03 Thread martin
Craig R. McClanahan wrote: On Mon, 2 Apr 2001, Amy Roh wrote: Hi Martin, See comments below. Martin Dengler wrote: [snip] 1) Name, Package, and Inner Classes: Name: Current name is CGIGatewayServlet. The rationale is "this is the first name I thought of." Would we

Re: CGI support servlet (TC 4) -- feedback wanted

2001-04-03 Thread martin
Amy, Thanks for the feedback; see comments inline. Martin Amy Roh wrote: Hi Martin, See comments below. Martin Dengler wrote: [snip] If so, would people prefer I do that myself and submit a load of file patches for the commit of the CGI servlet related files which included

Re: CGI support servlet (TC 4) -- feedback wanted

2001-04-03 Thread martin
Mel Martinez wrote: --- Bip Thelin [EMAIL PROTECTED] wrote: [snip] +1 on having CGI in web.xml but commented out, regarding SSI I suggest we add a configure property(like Apaches NoExec) that set's whether #exec is allowed or not. And if that property is not set it defaults to

RE: Tomcat 4.0-beta-2 Security Vulnerability

2001-04-03 Thread GOMEZ Henri
I suggest that we create a revised version of beta 2, clearly labelled so that people will know whether they have the corrected version or not -- and we should do this immediately (like today) to minimize the number of people who end up downloading twice. I suggest we call the updated

cvs commit: jakarta-tomcat/src/doc mod_jk-howto.html

2001-04-03 Thread hgomez
hgomez 01/04/02 23:47:34 Modified:src/doc mod_jk-howto.html Log: Correct documentation since in mod_jk warn log level didn't exist, use info instead (half-close BUG #332) Add info about JkLogStampFormat directive Revision ChangesPath 1.7 +11 -10

Tomcat 4.0-beta-3 Released (SECURITY VULNERABILITY)

2001-04-03 Thread Craig R. McClanahan
release (or the nightly build dated 20010403 or later) is strongly encouraged to immediately update to the beta 3 release. Craig McClanahan

context factories

2001-04-03 Thread Torgeir Veimo
I've read in a post by Remy with subject: "Re: ejb-ref ejb-link Implementation in 4.0.b1", http://w4.metronet.com/~wjm/tomcat/2001/Mar/msg00273.html that the only two factories supported in tomcat right now is one for getting Tyrex managed data sources User Transactions. I'm interested in

Directory registering

2001-04-03 Thread Zsolt Horvath
Hi ! Anybody knows how to register a new directory under the TomCat ? Iam tried this in the /conf/server.xml but it doesnt work.

debugging tomcat's jndi provider

2001-04-03 Thread Torgeir Veimo
I need to look at the behaviour of the jndi provider inside tomcat. Are there any tricks to debugging tomcat? -- - Torgeir

Re: context factories

2001-04-03 Thread Craig R. McClanahan
On Tue, 3 Apr 2001, Torgeir Veimo wrote: I've read in a post by Remy with subject: "Re: ejb-ref ejb-link Implementation in 4.0.b1", http://w4.metronet.com/~wjm/tomcat/2001/Mar/msg00273.html that the only two factories supported in tomcat right now is one for getting Tyrex managed data

? on SSI virtual file

2001-04-03 Thread Amy Roh
(1) According to NCSA "virtual gives a virtual path to a document on the server." So no matter which context you're in, !--#include virtual="/test.txt" -- should try to access "test.txt" on your server's root, right? Does virtual have to start with "/" always? I would think so. If not, what

Re: ? on SSI virtual file

2001-04-03 Thread Bip Thelin
Amy Roh wrote: (1) According to NCSA "virtual gives a virtual path to a document on the server." So no matter which context you're in, !--#include virtual="/test.txt" -- should try to access "test.txt" on your server's root, right? Does virtual have to start with "/" always? I would

Re: ? on SSI virtual file

2001-04-03 Thread cmanolache
On Tue, 3 Apr 2001, Amy Roh wrote: (1) According to NCSA "virtual gives a virtual path to a document on the server." So no matter which context you're in, !--#include virtual="/test.txt" -- should try to access "test.txt" on your server's root, right? Does virtual have to start with "/"

cvs commit: jakarta-tomcat-4.0/catalina/src/conf web.xml

2001-04-03 Thread amyroh
amyroh 01/04/03 15:07:10 Modified:catalina/src/conf web.xml Log: Added "isVirtualWebappRelative" parameter to give an option that virtual paths can be webapp-relative. Defaults to false following NCSA. Revision ChangesPath 1.16 +5 -0

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/util/ssi SsiMediator.java

2001-04-03 Thread amyroh
amyroh 01/04/03 15:45:33 Modified:catalina/src/share/org/apache/catalina/util/ssi SsiMediator.java Log: Fixed virtual behavior to follow NCSA rules with a webapp-relative option. Revision ChangesPath 1.3 +48 -9

FW: Tomcat may reveal script source code by URL trickery 2

2001-04-03 Thread Jon Stevens
-- From: "Sverre H. Huseby" [EMAIL PROTECTED] Reply-To: "Sverre H. Huseby" [EMAIL PROTECTED] Date: Tue, 3 Apr 2001 10:25:26 +0200 To: [EMAIL PROTECTED] Subject: Tomcat may reveal script source code by URL trickery 2 Meta comment Ok, I know there has already been a report

Re: CGI support servlet (TC 4) -- feedback wanted

2001-04-03 Thread Amy Roh
Right now they are basically the same scripts that I added to the examples webapp. So, should I just duplicate the scripts so we have one set in tomcat-root/webapps/examples/WEB-INF/cgi-bin and one set in tomcat-root/tester/src/bin? Or would the tester/src/bin/tester.xml simply have some

[PATCH] bufferSize overflows in BodyContentImpl TC3.3M2

2001-04-03 Thread William Barker
The bufferSize variable in BodyContentImpl is declared as an int. This results in an integer overflow very quickly for even moderately big output. (Think displaying the results of a SQL table as a HTML table). I imagine that the ultimate solution will be to declare it as a long, but in the mean

Re: JNDI realm for Catalina

2001-04-03 Thread Martin Smith
This sounds excellent. I appreciate the ability to specify which attribute to match: I plan to use "mail" in a current application. I wonder if it wouldn't be useful to permit a principal or a credential to be an attribute in the user's (subject's) own entry, e.g., "creditbalance." (For some

cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util PrefixMapper.java

2001-04-03 Thread costin
costin 01/04/03 21:04:50 Modified:src/share/org/apache/tomcat/util PrefixMapper.java Log: One bug in a previous fix, test host!=null. Revision ChangesPath 1.10 +8 -7 jakarta-tomcat/src/share/org/apache/tomcat/util/PrefixMapper.java Index: