The source are still missing in :
http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-b3/src/
Regards.
Tomcat 4.0-beta-3 is an update to the Tomcat 4.0-beta-2
distribution that
was released on 30 March 2001. It fixes a further security
vulnerability
related to potentially exposing JSP source that was only partially
corrected in beta 2. Anyone using versions of Tomcat 4.0
earlier than the
beta 3 release (or the nightly build dated 20010403 or later)
is strongly
encouraged to immediately update to the beta 3 release.
Craig McClanahan