Log Message:
Update to 7.0.68

Changelog:
Tomcat 7.0.68 (violetagg)

    General

        add	Allow to configure multiple JUnit test class patterns with the build \ 
property test.name and document the property in BUILDING.txt. (rjung)

    Catalina

        fix	Correct implementation of validateClientProvidedNewSessionId so \ 
client provided session IDs may be rejected if validation is enabled. (markt)
        fix	56785: Avoid NullPointerException if directory exists on the class \ 
path that is not readable by the Tomcat user. (kkolinko)
        fix	57906: Suppress WebappClassLoader log messages when running with a \ 
security manager on Java 6, caused by \ 
java.beans.Introspector.findExplicitBeanInfo() calls during evaluation of EL \ 
expressions. (kkolinko)
        fix	58692: Make StandardJarScanner more robust. Log a warning if a class \ 
path entry cannot be scanned rather than triggering the failure of the web \ 
application. (markt)
        fix	58701: Reset the instanceInitialized field in StandardWrapper when \ 
unloading a Servlet so that a new instance may be correctly initialized. (markt)
        fix	58702: Ensure an access log entry is generated if the client aborts \ 
the connection. (markt)
        fix	Fixed various issues reported by Findbugs. (violetagg)
        fix	58735: Add support for the X-XSS-Protection header to the \ 
HttpHeaderSecurityFilter. Patch provided by Jacopo Cappellato. (markt)
        fix	58751: Correctly handle the case where an AsyncListener dispatches \ 
to a Servlet on an asynchronous timeout and the Servlet uses sendError() to \ 
trigger an error page. Includes a test case based on code provided by Andy \ 
Wilkinson.(markt)
        fix	58765: Change default for mapperContextRootRedirectEnabled to true \ 
since this is required for correct session management because of the default for \ 
sessionCookiePathUsesTrailingSlash. (markt)
        fix	Add the StatusManagerServlet to the list of Servlets that can only \ 
be loaded by privileged applications. (markt)
        fix	Simplify code and fix messages in \ 
org.apache.catalina.core.DefaultInstanceManager class. (kkolinko)
        fix	Ensure that the proper file encoding if specified will be used when \ 
a readme file is served by DefaultServlet. (violetagg)
        fix	Fix declaration of localPort attribute of Connector MBean: it is \ 
read-only. (kkolinko)
        fix	58766: Make skipping non-class files during annotation scanning \ 
faster by checking the file name first. Improve debug logging. (kkolinko)
        fix	58768: Log a warning if a redirect fails because of an invalid \ 
location. (markt)
        fix	58836: Correctly merge query string parameters when processing a \ 
forwarded request where the target includes a query string that contains a \ 
parameter with no value. (markt/kkolinko)
        fix	Make sure that shared Digester is reset in an unlikely error case in \ 
HostConfig.deployWAR(). (kkolinko)
        fix	Fix a potential JDBC resource leak in DataSourceRealm. (schultz)
        fix	58900: Correctly undeploy symlinked resources and prevent an \ 
infinite cycle of deploy / undeploy. (markt)
        fix	Protect initialization of ResourceLinkFactory when running with a \ 
SecurityManager. (kkolinko)
        add	Extend the feature available in the cluster session manager \ 
implementations that enables session attribute replication to be filtered bases \ 
on attribute name to all session manager implementations. Note that \ 
configuration attribute name has changed from sessionAttributeFilter to \ 
sessionAttributeNameFilter. Apply the filter on load as well as unload to ensure \ 
that configuration changes made while the web application is stopped are applied \ 
to any persisted data. (markt)
        add	Extend the session attribute filtering options to include filtering \ 
based on the implementation class of the value and optional WARN level logging \ 
if an attribute is filtered. These options are available for all of the Manager \ 
implementations that ship with Tomcat. When a SecurityManager is used filtering \ 
will be enabled by default. (markt)
        fix	58905: Ensure that Tomcat.silence() silences the correct logger and \ 
respects the current setting. (markt)
        fix	58946: Ensure that the request parameter map remains immutable when \ 
processing via a RequestDispatcher. (markt)

    Coyote

        add	New configuration option ajpFlush for the AJP connectors to disable \ 
the sending of AJP flush packets. (rjung)

    Jasper

        fix	Fix handling of missing messages in \ 
org.apache.el.util.MessageFactory. (violetagg)

    Cluster

        fix	In order to avoid that the heartbeat thread and the background \ 
thread to run Channel.heartbeat simultaneously, if heartbeatBackgroundEnabled of \ 
SimpleTcpCluster set to true, ensure that the heartbeat thread does not start. \ 
(kfujino)

    WebSocket

        fix	57489: Ensure onClose() is called when a WebSocket connection is \ 
closed even if the sending of the close message fails. Includes test cases by \ 
Barry Coughlan. (markt)
        fix	Fix a timing issue on session close that could result in an \ 
exception being thrown for an incomplete message even through the message was \ 
completed. (markt)

    Web Applications

        fix	Correct some typos in the JNDI resources How-To. (markt)
        fix	Don't create sessions unnecessarily in the Manager application. (markt)
        fix	Don't create sessions unnecessarily in the Host Manager application. \ 
(markt)
        fix	58723: Clarify documentation and error messages for the text \ 
interface of the manager to make clear that version must be used with path when \ 
referencing contexts deployed using parallel deployment. (markt)
        fix	Correct an error in the documentation of the extory will always be \ 
deleted and recreated by expanding the WAR if unpackWARs is true. (markt)
        fix	58935: Remove incorrect references in the documentation to using \ 
jar:file: URLs with the Manager application. (markt)

    Tribes

        fix	Add sun the static cluster. (kfujino)
        fix	Ignore the unnecessary member remove operation from different \ 
domain. (kfujino)
        fix	Add support for the shutdown notification of local members in the \ 
static cluster. (kfujino)
        fix	Ensure that asynchronous session replication thread is a daemon \ 
thread. (kfujino)

    Other

        update	Update the NSIS Installer used to build the Windows Installers to \ 
version 2.50. (markt/kkolinko)