[2.1] Can I change HTTP headers sent by a generator?

2024-04-16 Thread Christopher Schultz
All, I realize that Cocoon 2.1 is now unsupported, but I suspect this is something that hasn't changed a lot since then. I have a sitemap with a generator: http://internal/service/foo; /> Is there a way I can add custom HTTP headers to the request that will be made to

Participate in the ASF 25th Anniversary Campaign

2024-04-03 Thread Brian Proffitt
Hi everyone, As part of The ASF’s 25th anniversary campaign[1], we will be celebrating projects and communities in multiple ways. We invite all projects and contributors to participate in the following ways: * Individuals - submit your first contribution:

Community Over Code NA 2024 Travel Assistance Applications now open!

2024-03-27 Thread Gavin McDonald
Hello to all users, contributors and Committers! [ You are receiving this email as a subscriber to one or more ASF project dev or user mailing lists and is not being sent to you directly. It is important that we reach all of our users and contributors/committers so that they may get a chance

Community Over Code Asia 2024 Travel Assistance Applications now open!

2024-02-20 Thread Gavin McDonald
Hello to all users, contributors and Committers! The Travel Assistance Committee (TAC) are pleased to announce that travel assistance applications for Community over Code Asia 2024 are now open! We will be supporting Community over Code Asia, Hangzhou, China July 26th - 28th, 2024. TAC exists

Community over Code EU 2024 Travel Assistance Applications now open!

2024-02-03 Thread Gavin McDonald
Hello to all users, contributors and Committers! The Travel Assistance Committee (TAC) are pleased to announce that travel assistance applications for Community over Code EU 2024 are now open! We will be supporting Community over Code EU, Bratislava, Slovakia, June 3th - 5th, 2024. TAC exists

[no subject]

2024-02-03 Thread Gavin McDonald
Hello to all users, contributors and Committers! The Travel Assistance Committee (TAC) are pleased to announce that travel assistance applications for Community over Code EU 2024 are now open! We will be supporting Community over Code EU, Bratislava, Slovakia, June 3th - 5th, 2024. TAC exists

[ANN] Apache Cocoon 2.1 and 3.0 retired

2024-01-12 Thread Cédric Damioli
Apache Cocoon 2.1 and 3.0 retired -   After the recent release of Cocoon 2.3.0, the Apache Cocoon Community has   decided to retire both 2.1 and 3.0 versions, to focus on further developments   of the 2.3 branch   The 2.1 branch was first released

Future of the Cocoon project

2023-11-30 Thread Cédric Damioli
Dear Cocoon users and developers, Sorry for crossposting here, I wanted to be sure that all involved people were aware of the ongoing discussions. We recently pushed a new release of Cocoon, 11 years after the previous one. This release gathers all changes made in between as well as two

Re: CVE-2023-49733: Apache Cocoon's StreamGenerator is vulnerable to XXE injection

2023-11-30 Thread Cédric Damioli
Hi Warell, Yes it does ... I think however that it should be quite straight forward to use log4j2 instead if needed. Cédric Le 30/11/2023 à 12:30, warrell harries a écrit : Hi Cedric, Does this build still use the infamous Log4J v1. 2 jar I know it's actually benign due to no use of

Re: CVE-2023-49733: Apache Cocoon's StreamGenerator is vulnerable to XXE injection

2023-11-30 Thread warrell harries
Hi Cedric, Does this build still use the infamous Log4J v1. 2 jar I know it's actually benign due to no use of the jndi but security vulnerability scanners usually complain. Thanks for your work on this. Best regards Warrell On Thu, 30 Nov 2023, 11:16 Cédric Damioli, wrote: > Severity:

CVE-2023-49733: Apache Cocoon's StreamGenerator is vulnerable to XXE injection

2023-11-30 Thread Cédric Damioli
Severity: important Affected versions: - Apache Cocoon 2.2.0 before 2.3.0 Description: Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which

CVE-2022-45135: Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction

2023-11-29 Thread Cédric Damioli
Severity: moderate Affected versions: - Apache Cocoon 2.2.0 before 2.3.0 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to

Re: [ANN] Apache Cocoon 2.3.0 Released

2023-11-28 Thread gelo1234
Congrats on releasing Cocoon 2.3.0! Old School is still here! :) Guys, why not upgrading Cocoon 3 to Spring 6 and Java 17? That would be a major achievement! We switched to Java 8 with old Cocoon 2.0.4 a long time ago without any problems but it seems that the old/new Cocoon Classloader treats

AW: [ANN] Apache Cocoon 2.3.0 Released

2023-11-28 Thread Christofer Dutz
Anyone sharing this on LinkedIn and X? Chris Von: Cédric Damioli Datum: Dienstag, 28. November 2023 um 14:17 An: users@cocoon.apache.org , d...@cocoon.apache.org , annou...@apache.org Betreff: [ANN] Apache Cocoon 2.3.0 Released Apache Cocoon 2.3.0 Released -

[ANN] Apache Cocoon 2.3.0 Released

2023-11-28 Thread Cédric Damioli
Apache Cocoon 2.3.0 Released -   The Apache Cocoon Community is proud to announce the release of   Cocoon 2.3.0.   Apache Cocoon is a Spring-based framework (since version 2.2 of   Cocoon) built around the concepts of separation of concerns and   component-based

Registration open for Community Over Code North America

2023-08-28 Thread Rich Bowen
Hello! Registration is still open for the upcoming Community Over Code NA event in Halifax, NS! We invite you to register for the event https://communityovercode.org/registration/ Apache Committers, note that you have a special discounted rate for the conference at US$250. To take advantage of

"Fatal Error: Unable to locate package java.lang in classpath or bootclasspath" when upgrading to Tomcat9

2023-07-17 Thread Modou DIA
Hello Cocoon community, I am encountering an issue while migrating from Tomcat7 to Tomcat9. I am working with Cocoon 2.1.13 and Java11. During the deployment process I don't have any problems. However when I try to access the application, I got a white page and this StackTrace is generated

TAC Applications for Community Over Code North America and Asia now open

2023-06-16 Thread Gavin McDonald
Hi All, (This email goes out to all our user and dev project mailing lists, so you may receive this email more than once.) The Travel Assistance Committee has opened up applications to help get people to the following events: *Community Over Code Asia 2023 - * *August 18th to August 20th in

Re: How do I install and use Apache Cocoon 3?

2022-07-26 Thread Turritopsis Dohrnii Teo En Ming
Thanks for the links Greg. Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore On Tue, 26 Jul 2022 at 17:34, gelo1234 wrote: > > > Hello, > > Have you tried using Maven Archetypes: > https://cocoon.apache.org/3.0/download.html > and using official documentation for C3: >

Re: How do I install and use Apache Cocoon 3?

2022-07-26 Thread gelo1234
Hello, Have you tried using Maven Archetypes: https://cocoon.apache.org/3.0/download.html and using official documentation for C3: https://cocoon.apache.org/3.0/reference/index.html? I think you should start from there. Cocoon 3 is a bit different framework than Cocoon 2 was, although still

How do I install and use Apache Cocoon 3?

2022-07-26 Thread Turritopsis Dohrnii Teo En Ming
Subject: How do I install and use Apache Cocoon 3? Good day from Singapore, How do I install and use Apache Cocoon 3? Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore 26 July 2022 Tuesday Blogs: https://tdtemcerts.blogspot.com

[FINAL CALL] - Travel Assistance to ApacheCon New Orleans 2022

2022-06-27 Thread Gavin McDonald
To all committers and non-committers. This is a final call to apply for travel/hotel assistance to get to and stay in New Orleans for ApacheCon 2022. Applications have been extended by one week and so the application deadline is now the 8th July 2022. The rest of this email is a copy of what

Final reminder: ApacheCon North America call for presentations closing soon

2022-05-19 Thread Rich Bowen
[Note: You're receiving this because you are subscribed to one or more Apache Software Foundation project mailing lists.] This is your final reminder that the Call for Presetations for ApacheCon North America 2022 will close at 00:01 GMT on Monday, May 23rd, 2022. Please don't wait! Get your talk

REMINDER - Travel Assistance available for ApacheCon NA New Orleans 2022

2022-05-03 Thread Gavin McDonald
Hi All Contributors and Committers, This is a first reminder email that travel assistance applications for ApacheCon NA 2022 are now open! We will be supporting ApacheCon North America in New Orleans, Louisiana, on October 3rd through 6th, 2022. TAC exists to help those that would like to

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-31 Thread Christopher Schultz
Greg, On 3/31/22 12:17, Christopher Schultz wrote: Greg, On 3/29/22 13:41, gelo1234 wrote: Have you also tried HTMLT or XHTMLT Serializers? Default HTMLSerializer cannot handle some unicode characters: https://issues.apache.org/jira/browse/SLING-5973?attachmentOrder=asc Hmm. Are the HTMLT

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-31 Thread Cédric Damioli
Hi, To help isolate the issue, could you test with a simpler pipeline with only generator/single simple XSLT/xml serializer ? Cédric Le 31/03/2022 à 17:54, Christopher Schultz a écrit : Cédric, On 3/29/22 12:52, Cédric Damioli wrote: Do you use Xalan as XSLT Processor ? If so, I remember

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-31 Thread Christopher Schultz
Greg, On 3/31/22 12:13, Christopher Schultz wrote: On 3/29/22 13:37, gelo1234 wrote: Hello Chris, I think you will not get any icon-type character on output without using proper font rendering - like Emoji support? Emoji might not be supported by default in Cocoon. This isn't a

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-31 Thread Christopher Schultz
Greg, On 3/29/22 13:41, gelo1234 wrote: Have you also tried HTMLT or XHTMLT Serializers? Default HTMLSerializer cannot handle some unicode characters: https://issues.apache.org/jira/browse/SLING-5973?attachmentOrder=asc Hmm. Are the HTMLT / XHTMLT serializers built-in? I have disabled all

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-31 Thread Christopher Schultz
Greg, On 3/29/22 13:37, gelo1234 wrote: Hello Chris, I think you will not get any icon-type character on output without using proper font rendering - like Emoji support? Emoji might not be supported by default in Cocoon. This isn't a font-rendering issue; it's just ... wrong. Either the

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-31 Thread Christopher Schultz
Cédric, On 3/29/22 12:52, Cédric Damioli wrote: Do you use Xalan as XSLT Processor ? If so, I remember https://issues.apache.org/jira/browse/XALANJ-2617 which could be a cause of your issue. I resolved it on my side years ago by compiling my own patched version > of Xalan. I'm using

Call for Presentations now open, ApacheCon North America 2022

2022-03-30 Thread Rich Bowen
[You are receiving this because you are subscribed to one or more user or dev mailing list of an Apache Software Foundation project.] ApacheCon draws participants at all levels to explore “Tomorrow’s Technology Today” across 300+ Apache projects and their diverse communities. ApacheCon showcases

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-29 Thread gelo1234
Chris, Have you also tried HTMLT or XHTMLT Serializers? Default HTMLSerializer cannot handle some unicode characters: https://issues.apache.org/jira/browse/SLING-5973?attachmentOrder=asc Greetings, Greg wt., 29 mar 2022 o 19:37 gelo1234 napisał(a): > Hello Chris, > > I think you will not get

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-29 Thread gelo1234
Hello Chris, I think you will not get any icon-type character on output without using proper font rendering - like Emoji support? Emoji might not be supported by default in Cocoon. So this might be the reason why you get HTML entities instead of Emoji-icons. Also notice:

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-29 Thread Cédric Damioli
Do you use Xalan as XSLT Processor ? If so, I remember https://issues.apache.org/jira/browse/XALANJ-2617 which could be a cause of your issue. I resolved it on my side years ago by compiling my own patched version of Xalan. For "markers", you may use labels on your sitemap steps associated

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-29 Thread Christopher Schultz
Cédric, On 3/29/22 12:06, Cédric Damioli wrote: Could you provide more details ? How is your XML processed before outputting the wrong UTF-8 sequence ? It's somewhat straightforward: https://source/; />

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-29 Thread Cédric Damioli
Hi Christopher, Could you provide more details ? How is your XML processed before outputting the wrong UTF-8 sequence ? Regards, Cédric Le 29/03/2022 à 17:48, Christopher Schultz a écrit : All, I'm still struggling with this. I have upgraded to 2.1.13 which includes the fix for

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2022-03-29 Thread Christopher Schultz
All, I'm still struggling with this. I have upgraded to 2.1.13 which includes the fix for https://issues.apache.org/jira/browse/COCOON-2352 but I'm still getting that American flag converted into those 4 HTML entities: I would expect there to be a single (multibyte) character in the output

ApacheCon starts tomorrow!

2021-09-20 Thread Rich Bowen
ApacheCon @Home starts tomorrow! Details at https://www.apachecon.com/acah2021/index.html (Note: You're receiving this because you are subscribed to one or more user lists for Apache Software Foundation projects.) We've got three days of great content lined up for you, spanning 14 project

ApacheCon is just 3 weeks away!

2021-09-03 Thread Rich Bowen
[You are receiving this email because you are subscribed to the user list of one or more Apache project.] Dear Apache enthusiast, ApacheCon is our annual convention, featuring content related to our many software projects. This year, it will be held on September 21-23. Registration is free

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-31 Thread Leszek Gawron
I have never attempted a cocoon release - doesn't look like a trivial task, so maybe someone here has more experience? I'd like one more thing "fixed" if it's possible: org.apache.cocoon.forms.formmodel.Repeater has some "crazy" limitation that has hit me several times on production:

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-30 Thread Gabriel Gruber
Hi Leszak, Yeah, a release would be nice – Fix version 2.2.1 was stated in this ticket https://issues.apache.org/jira/browse/COCOON-2347 But was never released though… Cheers, Gabriel From: Leszek Gawron Date: Friday, 30. July 2021 at 10:35 To: users@cocoon.apache.org Subject: Re: using

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-30 Thread Leszek Gawron
I am sorry for not reading the thread to the last message. Maybe a release then? On Tue, Jul 20, 2021 at 12:39 PM Gabriel Gruber wrote: > Hi Vincent, > > > > We at Workflow are also still using Cocoon 2.2 as part of our main product > and are running it with Java 11 and Tomcat 9 on Windows and

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-30 Thread Leszek Gawron
On Mon, Jul 19, 2021 at 2:27 PM Cédric Damioli wrote: > Hi, > > Not only Tomcat, but each and every dependency your particular project > uses. > As of today, Cocoon 2.1 works well in a Java 11+/Tomcat 9+ environment, > with all dependencies upgraded. > > Cocoon 2.1.13 itself contained a fix for

AW: using cocoon 2.1 in the long-term, security concerns

2021-07-20 Thread Gabriel Gruber
Hi Vincent, We at Workflow are also still using Cocoon 2.2 as part of our main product and are running it with Java 11 and Tomcat 9 on Windows and Linux OSes. In the past we did not see any major problem with cocoon which were not solvable. From a security perspective maybe the biggest thread

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-20 Thread Vincent Neyt
Thank you very much Warrell, Cédric, Greg and Chris. I'm happy to hear that you believe Cocoon poses a very low security risk as long as Tomcat and Java are up to date, and that Cocoon should continue to work well with future versions of T & J as long as the dependency libraries in Cocoon are

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-19 Thread Christopher Schultz
Vincent, On 7/19/21 08:03, Vincent Neyt wrote: Hi Cocoon users, I'd like to ask your opinion on the long-term security risks of running Cocoon on a server. The colleague responsible for the servers at my university is inquiring if the software I'm using for my website is up to date and is

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-19 Thread gelo1234
Hello Vincent, It depends on your future Strategy. Cocoon is very flexible. We've been running Cocoon 3.0-beta in production with Tomcat9/10, Quarkus and even Kubernetes 1.20 etc. No problems at all :) with Java 8 :) We cannot switch to Java 11, because it's not compatible with Cocoon libraries

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-19 Thread Cédric Damioli
Hi, Not only Tomcat, but each and every dependency your particular project uses. As of today, Cocoon 2.1 works well in a Java 11+/Tomcat 9+ environment, with all dependencies upgraded. Cocoon 2.1.13 itself contained a fix for a security-related issue, but in the past years, there wasn't many

Re: using cocoon 2.1 in the long-term, security concerns

2021-07-19 Thread warrell harries
The Tomcat version must be updated to address these concerns. That should do it On Mon, 19 Jul 2021, 13:03 Vincent Neyt, wrote: > Hi Cocoon users, > > I'd like to ask your opinion on the long-term security risks of running > Cocoon on a server. The colleague responsible for the servers at my >

using cocoon 2.1 in the long-term, security concerns

2021-07-19 Thread Vincent Neyt
Hi Cocoon users, I'd like to ask your opinion on the long-term security risks of running Cocoon on a server. The colleague responsible for the servers at my university is inquiring if the software I'm using for my website is up to date and is concerned that I'm using outdated software that could

Re: Cocoon 2.1.11 problem with JDK release versions above 255

2021-06-30 Thread Christopher Schultz
Vincent, On 6/30/21 11:24, Vincent Neyt wrote: Hi all, thank you very much for all your reactions. I just found time to try Nico Verwer's suggestion, and that worked perfectly! It seems it was the very old version of icu4j.jar that caused the problem. As Nico suggested I exchanged it for

Re: Cocoon 2.1.11 problem with JDK release versions above 255

2021-06-30 Thread Vincent Neyt
Hi all, thank you very much for all your reactions. I just found time to try Nico Verwer's suggestion, and that worked perfectly! It seems it was the very old version of icu4j.jar that caused the problem. As Nico suggested I exchanged it for icu4j-69.1.jar in the lib directory, and was able to

Re: Cocoon 2.1.11 problem with JDK release versions above 255

2021-06-30 Thread Cédric Damioli
Hi Vincent, Do you have any stack trace to help finding the actual issue ? I know there's a similar issue with the ICU library. Do you use it, and if so in which version ? Regards, Cédric Le 30/06/2021 à 17:11, Francesco Chicchiriccò a écrit : On 28/06/21 09:48, Vincent Neyt wrote: Hi

Re: Cocoon 2.1.11 problem with JDK release versions above 255

2021-06-30 Thread Francesco Chicchiriccò
On 28/06/21 09:48, Vincent Neyt wrote: Hi list, I did a stupid thing, I posted to the user list without first subscribing, so I'm sending my query again now that I am subscribed to the list. Sorry for the inconvenience! Since 2011 I've been using a build of Cocoon 2.1.11 (inside Tomcat 8) as

Cocoon 2.1.11 problem with JDK release versions above 255

2021-06-28 Thread Vincent Neyt
Hi list, I did a stupid thing, I posted to the user list without first subscribing, so I'm sending my query again now that I am subscribed to the list. Sorry for the inconvenience! Since 2011 I've been using a build of Cocoon 2.1.11 (inside Tomcat 8) as the publishing framework for my website.

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-22 Thread Jamie Norrish
On Mon, 2021-04-19 at 08:39 +0200, Francesco Chicchiriccò wrote: > Any chance you can share your changes, even as PR against > > https://github.com/apache/cocoon/tree/BRANCH_2_1_X > > ? Firstly, sorry for the delay responding to this. The patches to Cocoon are to two files[1], but the one in

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-19 Thread Francesco Chicchiriccò
On 18/04/21 00:07, Jamie Norrish wrote: On Thu, 2021-04-15 at 09:48 +1200, Jamie Norrish wrote: Sadly it does apparently persist, I'm told, so I will try backporting the fix and see how that goes. The backport (and slightly messy modifications to the Cocoon code) appears to have worked for at

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-17 Thread Jamie Norrish
On Thu, 2021-04-15 at 09:48 +1200, Jamie Norrish wrote: > Sadly it does apparently persist, I'm told, so I will try backporting > the fix and see how that goes. The backport (and slightly messy modifications to the Cocoon code) appears to have worked for at least some of the people experiencing

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-14 Thread Jamie Norrish
On Tue, 2021-04-13 at 08:46 +0200, Francesco Chicchiriccò wrote: > Please report in case the problem still exists with 2.1.13: I don't > think that upgrading to Commons Lang 3.0 is a viable option, but you > might want to locally backport the fix. Sadly it does apparently persist, I'm told, so I

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-13 Thread Francesco Chicchiriccò
On 13/04/21 06:59, Jamie Norrish wrote: On Tue, 2021-04-13 at 06:42 +0200, Francesco Chicchiriccò wrote: did you consider upgrading Cocoon to latest 2.1.x available, e.g. 2.1.13? Besides the fix for the mentioned issue, you will get much more. Sorry, I was under the mistaken impression that

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-12 Thread Jamie Norrish
On Tue, 2021-04-13 at 06:42 +0200, Francesco Chicchiriccò wrote: > did you consider upgrading Cocoon to latest 2.1.x available, e.g. > 2.1.13? Besides the fix for the mentioned issue, you will get much > more. Sorry, I was under the mistaken impression that the systems under which the error

Re: LANG-624 bug causing problems in Cocoon 2.1

2021-04-12 Thread Francesco Chicchiriccò
Hi, did you consider upgrading Cocoon to latest 2.1.x available, e.g. 2.1.13? Besides the fix for the mentioned issue, you will get much more. Download it from http://cocoon.apache.org/mirror.cgi as usual; change log is available at http://cocoon.apache.org/2.1/changes.html HTH Regards. On

LANG-624 bug causing problems in Cocoon 2.1

2021-04-12 Thread Jamie Norrish
Hi, The old bug LANG-264[1] is causing problems in Cocoon 2.1 on some installations (seemingly all on Macs). This bug was fixed long ago, but Cocoon 2.1.13 still uses commons-lang-2.4.jar, and replacing all of the commons-* JARs and rebuilding Cocoon results in other errors. What is the best way

Call for Presentations for ApacheCon 2021 now open

2021-03-08 Thread Rich Bowen
[Note: You are receiving this because you are subscribed to a users@ list on one or more Apache Software Foundation projects.] The ApacheCon Planners and the Apache Software Foundation are pleased to announce that ApacheCon@Home will be held online, September 21-23, 2021. Once again, we’ll be

"Address already in use" on Amazon Linux

2020-10-01 Thread Mickish, Andrew (NDR)
I'm moving an old cocoon 2.1 installation from CentOS 7 to Amazon Linux 2, and getting a an "Address already in use" error on Amazon Linux. To isolate the problem, I initialized two AWS EC2 instances from the latest CentOS7 and Amazon Linux images. They have the same apache-tomcat-8.5.56,

Re: Build failed: -Djava.endorsed.dirs=lib/endorsed is not supported.

2020-09-13 Thread Cédric Damioli
Hi, It should be ok to build with Java 8. AFAIK, this error message in only provided by a JVM 9+ Is it possible that you have both JRE 8 and JRE 9+ on your system and that you use the wrong one ? Regards, Cédric Le 13/09/2020 à 11:31, Thorsten Mauch a écrit : Hi , I try to build cocoon

Build failed: -Djava.endorsed.dirs=lib/endorsed is not supported.

2020-09-13 Thread Thorsten Mauch
Hi , I try to build cocoon but i get an  this error: -Djava.endorsed.dirs=lib/endorsed is not supported. Endorsed standards and standalone APIs in modular form will be supported via the concept of upgradeable modules. Error: Could not create the Java Virtual Machine. Error: A fatal exception

Re: [CVE-2020-11991] Apache Cocoon security vulnerability

2020-09-11 Thread Cédric Damioli
Hi, Entities resolution is managed by features of the SAX Parser, before any transformation. Cédric Le 11/09/2020 à 12:12, gelo1234 a écrit : Hello Cedric, Are external entities blocked also in XSLT? Greetings, Greg pt., 11 wrz 2020 o 11:39 Cédric Damioli >

Re: [CVE-2020-11991] Apache Cocoon security vulnerability

2020-09-11 Thread gelo1234
Hello Cedric, Are external entities blocked also in XSLT? Greetings, Greg pt., 11 wrz 2020 o 11:39 Cédric Damioli napisał(a): > [CVE-2020-11991] Apache Cocoon security vulnerability > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: Apache Cocoon up to

[CVE-2020-11991] Apache Cocoon security vulnerability

2020-09-11 Thread Cédric Damioli
[CVE-2020-11991] Apache Cocoon security vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Cocoon up to 2.1.12 Description: When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system

Re: upgrade 2.1.11 -> 2.1.13

2020-08-24 Thread Cédric Damioli
Hi, I wouldn't expect any major issue upgrading from 2.1.11 to 2.1.13. You may look at [1] to identify which fixes are relevant to you. Regards, Cédric [1] : https://issues.apache.org/jira/browse/COCOON-2367?jql=project%20%3D%20COCOON%20AND%20fixVersion%20in%20(2.1.12%2C%202.1.13) Le

upgrade 2.1.11 -> 2.1.13

2020-08-23 Thread Thorsten Mauch
Hi all I'm happy to see some activity in the development.  I also still run two applications with cocoon, but with very old 2.1.11 and java 1.6.   My question, if i try to upgrade to 2.1.13 and a current java,  does i have to expect major issues ? Of course nobody know my apps. But maybe

Re: [ANN] Apache Cocoon 2.1.13 Released

2020-07-31 Thread Cédric Damioli
I updated the mirror page. Thanks ! Cédric Le 30/07/2020 à 12:24, warrell harries a écrit : Great news! Well done! The download is still showing version 2.12 Many thanks from a die-hard cocooner On Thu, 30 Jul 2020 at 11:12, Cédric Damioli > wrote: Apache

Re: [ANN] Apache Cocoon 2.1.13 Released

2020-07-30 Thread gelo1234
No shit!!! Congratulations Apache Cocoon is back from Dead??? Great news. Can Cocoon 3.0 be finally released? If I recall C3.0 was in BETA that was _never_ released. Only ALFA3 was released. Greetings, Greg czw., 30 lip 2020 o 12:12 Cédric Damioli napisał(a): > Apache Cocoon 2.1.13

Re: [ANN] Apache Cocoon 2.1.13 Released

2020-07-30 Thread warrell harries
Great news! Well done! The download is still showing version 2.12 Many thanks from a die-hard cocooner On Thu, 30 Jul 2020 at 11:12, Cédric Damioli wrote: > Apache Cocoon 2.1.13 Released > - > > The Apache Cocoon Community is proud to announce the new release

[ANN] Apache Cocoon 2.1.13 Released

2020-07-30 Thread Cédric Damioli
Apache Cocoon 2.1.13 Released -    The Apache Cocoon Community is proud to announce the new release    of Apache Cocoon.   Apache Cocoon is a web development framework built around the concept   of separation of concerns (that is: allowing people to do their job  

Announcing ApacheCon @Home 2020

2020-06-29 Thread Rich Bowen
Hi, Apache enthusiast! (You’re receiving this because you’re subscribed to one or more dev or user mailing lists for an Apache Software Foundation project.) The ApacheCon Planners and the Apache Software Foundation are pleased to announce that ApacheCon @Home will be held online, September

Call for presentations for ApacheCon North America 2020 now open

2020-01-21 Thread Rich Bowen
Dear Apache enthusiast, (You’re receiving this message because you are subscribed to one or more project mailing lists at the Apache Software Foundation.) The call for presentations for ApacheCon North America 2020 is now open at https://apachecon.com/acna2020/cfp ApacheCon will be held at

Re: How to configure TraxProcessor in 2.2?

2019-12-11 Thread Mark H. Wood
After enumerating all the ways that don't work, I think I have this figured out. (I'm trying to wrap Saxon's TransformerFactoryImpl so that I can configure it with our own Java function implementations as Saxon Integrated Extension Function classes.) XSLTProcessor *must* be defined Avalon-style.

Re: How to configure TraxProcessor in 2.2?

2019-12-11 Thread gelo1234
Wow, you Haka-Smart guy :) No need for a Saxon commercial licence anymore with Saxon-HE :) That was what we missed with new Saxon-HE :) Thanks! Good Job! With C3 (Cocoon 3.0) you can use Java-only code with no cocoon-sitemap config dependency :) Such a little thing and I get a big smile on my

Re: How to configure TraxProcessor in 2.2?

2019-12-11 Thread Mark H. Wood
On Tue, Dec 10, 2019 at 11:21:09PM +0100, gelo1234 wrote: > I don't think this is the proper way to do this and if it's possible at > all. Extension functions are only available in commercial releases of Saxon > (PE and EE). > I'm afraid they are not available in open-source Saxon-HE. We were

Re: How to configure TraxProcessor in 2.2?

2019-12-10 Thread gelo1234
Hi Mark, I don't think this is the proper way to do this and if it's possible at all. Extension functions are only available in commercial releases of Saxon (PE and EE). I'm afraid they are not available in open-source Saxon-HE. We were trying to use Saxon-HE with Cocoon 3.0 and

Re: How to configure TraxProcessor in 2.2?

2019-12-10 Thread Mark H. Wood
On Tue, Dec 10, 2019 at 12:10:41AM +0100, gelo1234 wrote: > Mark, > > Why do you need a Custom XSLT Processor other than Saxon actually?? Saxon > should do the right thing. Why wrapping it inside any "upper-level" > Transformer? It's getting kinda weird. You can always add a new Java class > to

Re: How to configure TraxProcessor in 2.2?

2019-12-09 Thread gelo1234
Mark, Why do you need a Custom XSLT Processor other than Saxon actually?? Saxon should do the right thing. Why wrapping it inside any "upper-level" Transformer? It's getting kinda weird. You can always add a new Java class to standard Cocoon Processors/Transformers.

Re: How to configure TraxProcessor in 2.2?

2019-12-09 Thread Mark H. Wood
On Thu, Dec 05, 2019 at 04:13:08PM +0100, Javier Puerto wrote: > I recommend you to use the Spring configuration. I never had this > requirement before but by the error message and the configuration fragment > that you have sent the NPE is caused because you are not passing an > instance of

Re: How to configure TraxProcessor in 2.2?

2019-12-06 Thread gelo1234
Hi Mark, Also make sure, you have that class: org.dspace.saxon.ConfigurableTransformerFactory available on the CLASSPATH (-> WEB-INF/lib/*.jar) And a proper version/config for Saxon HE. Here is the guide: https://stackoverflow.com/questions/22483436/using-saxon9-for-xslt-with-apache-cocoon-2-2

Re: How to configure TraxProcessor in 2.2?

2019-12-05 Thread Javier Puerto
Hi Mark, I recommend you to use the Spring configuration. I never had this requirement before but by the error message and the configuration fragment that you have sent the NPE is caused because you are not passing an instance of "org.dspace.saxon.ConfigurableTransformerFactory", you are passing

Re: How to configure TraxProcessor in 2.2?

2019-12-04 Thread warrell harries
Hi Mark, I never could get 2.2 working  However, I'm using 2.12 every day, all over the world - mostly with Saxon for XSLT 2.0 All I can advise, use 2.12... Best regards Warrell On Wed, 4 Dec 2019, 9:46 pm Mark H. Wood, wrote: > I'm using Cocoon 2.2. I need to pass a custom XSLT

How to configure TraxProcessor in 2.2?

2019-12-04 Thread Mark H. Wood
I'm using Cocoon 2.2. I need to pass a custom XSLT transformer factory (that wraps Saxon's to configure it) to TraxProcessor, and the advice I've found in several places around the Web doesn't seem to be working: my factory class never gets instantiated. I've got a file

ApacheCon North America 2019 Schedule Now Live!

2019-06-12 Thread Rich Bowen
Dear Apache Enthusiast, (You’re receiving this message because you’re subscribed to one or more Apache Software Foundation project user mailing lists.) We’re thrilled to announce the schedule for our upcoming conference, ApacheCon North America 2019, in Las Vegas, Nevada. See it now at

4 Apache Events in 2019: DC Roadshow soon; next up Chicago, Las Vegas, and Berlin!

2019-03-06 Thread Rich Bowen
Dear Apache Enthusiast, (You’re receiving this because you are subscribed to one or more user mailing lists for an Apache Software Foundation project.) TL;DR: * Apache Roadshow DC is in 3 weeks. Register now at https://apachecon.com/usroadshowdc19/ * Registration for Apache Roadshow Chicago is

Re: Cocoon java function call Byte code verification failed

2019-02-05 Thread gelo1234
Hello, What strikes me the most is the fact that old Cocoon 2.x works fine (flawlessly) with OpenJDK 8 implementation :) It was a total shock!! for us. Even though you can't tell it is absolutely 100% compliant (someone should be writing TCK for this), you still find Java revision to be 1.0!!! in

Re: Cocoon java function call Byte code verification failed

2019-02-05 Thread gelo1234
Hello Senthilkumar, The problem is related to String Pool implementation that has changed in the Java 8 spec. I suppose you were running the previous Java release (7, 6?) and switched now to Java 8? Unfortunately you cannot use Java8 with the current Cocoon 2.1.11 stack unless you change the Java

Cocoon java function call Byte code verification failed

2019-02-04 Thread Thangavel, Senthil Kumar (LNG-CON)
HI, I am currently running in to the below issue while executing my cocoon based web app. I use cocoon 2.1.11 version, Tomcat 9 and Java 8. Could some one help me in identifying the problem and possible fix. Thanks in advance. Caused by:

Re: Getting UTF-16 encoding on dynamic content regardless of output content type

2018-10-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Some additional information at the end. On 10/30/18 11:58, Christopher Schultz wrote: > All, > > I'm attempting to do everything with UTF-8 in Cocoon 2.1.11. I have > a servlet generating XML in UTF-8 encoding and I have a pipeline > with a

Getting UTF-16 encoding on dynamic content regardless of output content type

2018-10-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm attempting to do everything with UTF-8 in Cocoon 2.1.11. I have a servlet generating XML in UTF-8 encoding and I have a pipeline with a few transforms in it, ultimately serializing to XHTML. If I have a Unicode character in the XML which

Re: Migrating cocoon 2.1 project to 2.2

2018-10-04 Thread gelo1234
Hello Senthilkumar, I think we have the 2-factor based problem here. 1 is that you use Xalan instead of Saxon in your Pipeline (error log shows xalan package info not saxon) 2. is that it might adhere to Saxon version that you use. Old Saxon had many features that new Saxon does NOT have unless

Migrating cocoon 2.1 project to 2.2

2018-10-04 Thread Thangavel, Senthil Kumar (LNG-CON)
HI, I am currently migrating the cocoon 2.1 based project to 2.2, while I tried to set it up with cocoon 2.2 I am running in to following issue while executing a transform pipeline. Could some on help me to fix this issue and provide your expert advice. Thanks in advance. I have tried with the

Add Lucene in Cocoon2.2

2018-09-21 Thread Thangavel, Senthil Kumar (LNG-CON)
HI, Could someone tell me how to add Lucene search capability in cocoon2.2 ? Regards, Senthilkumar.T

Re: Compatibility check

2018-09-11 Thread gelo1234
Tomcat9 and Java8 works fine with C3.0beta. Never tried C2.1.x Greetings, Greg wt., 11 wrz 2018 o 11:24 Cédric Damioli napisał(a): > Hi, > > We use Cocoon 2.1.12 with Java 8 in production for years without any > problems. Never tried Tomcat 9 yet, but any other versions worked well > also,

  1   2   3   4   5   6   7   8   9   10   >