Log Message:
Update to 8.0.32

Changelog:
Tomcat 8.0.32 (markt)
General

    Add: Allow to configure multiple JUnit test class patterns with the build \ 
property test.name and document the property in BUILDING.txt. (rjung)
    Fix: 58768: Log a warning if a redirect fails because of an invalid \ 
location. (markt)

Catalina

    Fix: Fix class loader decision on the delegation for class loading and \ 
resource lookup and make it faster too. (rjung)
    Fix: 58946: Ensure that the request parameter map remains immutable when \ 
processing via a RequestDispatcher. (markt)
    Fix: 58827: Deprecate what is left of the JSR 77 implementation. (markt)
    Fix: 58905: Ensure that Tomcat.silence() silences the correct logger and \ 
respects the current setting. (markt)

Coyote

    Add: New configuration option ajpFlush for the AJP connectors to disable the \ 
sending of AJP flush packets. (rjung)

Cluster

    Fix: Correct a regression in the session attribute filtering that prevented \ 
clustering from starting in the default configuration. (kfujino)

WebSocket

    Fix: Fix a timing issue on session close that could result in an exception \ 
being thrown for an incomplete message even through the message was completed. \ 
(markt)

not released Tomcat 8.0.31 (markt)
Catalina

    Fix: Correct implementation of validateClientProvidedNewSessionId so client \ 
provided session IDs may be rejected if validation is enabled. (markt)
    Fix: Add path parameter handling to HttpServletRequest.getContextPath(). \ 
This is a follow-up to the fix for 57215. (markt)
    Fix: 58692: Make StandardJarScanner more robust. Log a warning if a class \ 
path entry cannot be scanned rather than triggering the failure of the web \ 
application. Includes a test case written by Derek Abdine. (markt)
    Fix: 58701: Reset the instanceInitialized field in StandardWrapper when \ 
unloading a Servlet so that a new instance may be correctly initialized. (markt)
    Fix: 58702: Ensure an access log entry is generated if the client aborts the \ 
connection. (markt)
    Fix: Fixed various issues reported by Findbugs. (violetagg)
    Fix: 58735: Add support for the X-XSS-Protection header to the \ 
HttpHeaderSecurityFilter. Patch provided by Jacopo Cappellato. (markt)
    Fix: 58751: Correctly handle the case where an AsyncListener dispatches to a \ 
Servlet on an asynchronous timeout and the Servlet uses sendError() to trigger \ 
an error page. Includes a test case based on code provided by Andy \ 
Wilkinson.(markt)
    Fix: 58765: Change default for mapperContextRootRedirectEnabled to true \ 
since this is required for correct session management because of the default for \ 
sessionCookiePathUsesTrailingSlash. (markt)
    Fix: Add the StatusManagerServlet to the list of Servlets that can only be \ 
loaded by privileged applications. (markt)
    Fix: Simplify code and fix messages in \ 
org.apache.catalina.core.DefaultInstanceManager class. (kkolinko)
    Code: Deprecate InstanceListener, InstanceEvent and InstanceSupport prior to \ 
removal in 9.0.x. (markt)
    Fix: Ensure that the proper file encoding if specified will be used when a \ 
readme file is served by DefaultServlet. (violetagg)
    Fix: Fix declaration of localPort attribute of Connector MBean: it is \ 
read-only. (kkolinko)
    Fix: 58766: Make skipping non-class files during annotation scanning faster \ 
by checking the file name first. Improve debug logging. (kkolinko)
    Fix: 58809: Correctly recycle cookies when mapping requests for parallel \ 
deployment. As a side-effect of this fix, the system property \ 
org.apache.tomcat.util.http.ServerCookie.PRESERVE_COOKIE_HEADER is no longer \ 
used. From this release, Tomcat will always preserve the cookie header. (markt)
    Fix: 58836: Correctly merge query string parameters when processing a \ 
forwarded request where the target includes a query string that contains a \ 
parameter with no value. (markt/kkolinko)
    Fix: Make sure that shared Digester is reset in an unlikely error case in \ 
HostConfig.deployWAR(). (kkolinko)
    Fix: 58867: Improve checking on Host start for WAR files that have been \ 
modified while Tomcat has stopped and re-expand them if unpackWARs is true. \ 
(markt)
    Fix: Fix a potential JDBC resource leak in DataSourceRealm. (schultz)
    Fix: 58900: Correctly undeploy symlinked resources and prevent an infinite \ 
cycle of deploy / undeploy. (markt)
    Fix: Protect initialization of ResourceLinkFactory when running with a \ 
SecurityManager. (kkolinko)
    Add: Extend the feature available in the cluster session manager \ 
implementations that enables session attribute replication to be filtered bases \ 
on attribute name to all session manager implementations. Note that \ 
configuration attribute name has changed from sessionAttributeFilter to \ 
sessionAttributeNameFilter. Apply the filter on load as well as unload to ensure \ 
that configuration changes made while the web application is stopped are applied \ 
to any persisted data. (markt)
    Add: Extend the session attribute filtering options to include filtering \ 
based on the implementation class of the value and optional WARN level logging \ 
if an attribute is filtered. These options are available for all of the Manager \ 
implementations that ship with Tomcat. When a SecurityManager is used filtering \ 
will be enabled by default. (markt)

Jasper

    Fix: Fix handling of missing messages in org.apache.el.util.MessageFactory. \ 
(violetagg)

Cluster

    Fix: In order to avoid that the heartbeat thread and the background thread \ 
to run Channel.heartbeat simultaneously, if heartbeatBackgroundEnabled of \ 
SimpleTcpCluster set to true, ensure that the heartbeat thread does not start. \ 
(kfujino)
    Code: Simplify the code of JvmRouteBinderValve.ed directly at Engine \ 
element. (kfujino)

WebSocket

    Fix: 57489: Ensure onClose() is called when a WebSocket connection is closed \ 
even if the sending of the close message fails. Includes test cases by Barry \ 
Coughlan. (markt)

Web Applications

    Addl docs. (kfujino)
    Fix: Correct some typos in the JNDI resources How-To. (markt)
    Fix: Don't create sessions unnecessarily in the Manager application. (markt)
    Fix: Don't create sessions unnecessarily in the Host Manager application. (markt)
    referencing contexts deployed using parallel deployment. (markt)

Tribes

    Fix: Fix potential NPE in AbstractReplicatedMap.breakdown(). (kfujino)
    Fix: Add support for the startup notification of local members in the static \ 
cluster. (kfujino)
    Fix: Ignore the unnecessary member remove operation from different domain. \ 
(kfujino)
    Fix: Add support for the shutdown notification of local members in the \ 
static cluster. (kfujino)
    Fix: Ensure that asynchronous session replication thread is a daemon thread. \ 
(kfujino)

Other

    Update: Remove native code (Windows Service Wrapper, APR/native connector) \ 
support for Windows Itanium. (markt)
    Update: Update the packaged version of the Tomcat Native Library to 1.2.4 to \ 
pick up the Windows binaries that are based on OpenSSL 1.0.2e and APR 1.5.1. \ 
(markt)
    Update: Update the NSIS Installer used to build the Windows Installers to \ 
version 2.50. (markt/kkolinko)
    Update: Update optional Checkstyle library to 6.14.1. (kkolinko)