Log Message:
Update to 8.0.43

Changelog:
Tomcat 8.0.43 (violetagg)
Catalina

    Add: 54618: Add support to the HttpHeaderSecurityFilter for the HSTS preload \ 
parameter. (markt)
    Fix: 60876: Ensure that Set-Cookie headers generated by the \ 
Rfc6265CookieProcessor are aligned with the specification. Patch provided by Jim \ 
Griswold. (markt)
    Fix: 60911: Ensure NPE will not be thrown when looking for SSL session ID. \ 
Based on a patch by Didier Gutacker. (violetagg)

Coyote

    Fix: When using the NIO2 connector, ensure a WebSocket close frame is \ 
processed before the end of stream is processed to ensure that the end of stream \ 
is processed correctly. (markt)
    Fix: 60852: Correctly spell compressible when used in configuration \ 
attributes and internal code. Based on a patch by Michael Osipov. (markt)
    Fix: Improve sendfile handling when requests are pipelined. (markt)

Jasper

    Fix: Improve the error handling for simple tags to ensure that the tag is \ 
released and destroyed once used. (remm, violetagg)
    Fix: 60844: Correctly handle the error when fewer parameter values than \ 
required by the method are used to invoke an EL method expression. Patch \ 
provided by Daniel Gray. (markt)

jdbc-pool

    Fix: 60764: Implement equals() and hashCode() in the StatementFacade in \ 
order to enable these methods to be called on the closed statements if any \ 
statement proxy is set. This behavior can be changed with useStatementFacade \ 
attribute. (kfujino)

Other

    Fix: Refactor the build script and the NSIS installer script so that either \ 
NSIS 2.x or NSIS 3.x can be used to build the installer. This is primarily to \ 
re-enable building the installer on the Linux based CI system where the \ 
combination of NSIS 3.x and wine leads to failed installer builds. (markt)

2017-03-14 Tomcat 8.0.42 (markt)
Catalina

    Update: 60596: Improve performance of DefaultServlet when sendfile feature \ 
is disabled on connector. (kkolinko)
    Fix: Reduce the contention in the default InstanceManager implementation \ 
when multiple threads are managing objects and need to reference the annotation \ 
cache. (markt)
    Add: Extend the JreMemoryLeakPreventionListener to provide protection \ 
against ForkJoinPool.commonPool() related memory leaks. (markt)
    Code: 60674: Remove final marker from CorsFilter to enable sub-classing. (markt)
    Fix: 60683: Security manager failure causing NPEs when doing IO on some \ 
JVMs. (csutherl)
    Fix: 60688: Update the internal fork of Apache Commons BCEL to r1782855 to \ 
add early access Java 9 support to the annotation scanning code. (markt)
    Fix: When HTTP TRACE requests are disabled on the Connector, ensure that the \ 
HTTP OPTIONS response from the WebDAV servlet does not include TRACE in the \ 
returned Allow header. (markt)
    Fix: 60718: Improve error handling for asynchronous processing and correct a \ 
number of cases where the requestDestroyed() event was not being fired and an \ 
entry wasn't being made in the access logs. (markt)
    Fix: 60722: Take account of the dispatchersUseEncodedPaths setting on the \ 
current Context when generating paths for dispatches triggered by \ 
AsyncContext.dispatch(). (markt)
    Fix: 60728: Make the separator Tomcat uses in the Tomcat specific \ 
war:file:... URL protocol customizable via a system property. The separator is \ 
equivalent to the use of the ! character in jar:file:... URLs. The default \ 
separator of * remains unchanged. (markt)
    Fix: 60798: Correct a bug in the handling of JARs in unpacked WARs that \ 
meant multiple attempts to read the same entry from a JAR in succession would \ 
fail for the second and subsequent attempts. (markt)
    Fix: 60808: Ensure that the Map returned by ServletRequest.getParameterMap() \ 
is fully immutable. Based on a patch provided by woosan. (markt)
    Fix: 60824: Correctly cache the Subject in the session - if there is a \ 
session - when running under a SecurityManager. Patch provided by Jan \ 
Engehausen. (markt)
    Fix: Ensure request and response facades are used when firing application \ 
listeners. (markt/remm)

Coyote

    Fix: Ensure that executor thread pools used with connectors pre-start the \ 
configured minimum number of idle threads. (markt)
    Add: 60594: Allow some invalid characters that were recently restricted to \ 
be processed in requests by using the system property \ 
tomcat.util.http.parser.HttpParser.requestTargetAllow. (csutherl)
    Fix: Modify the cookie header generated by the Rfc6265CookieProcessor so it \ 
always sends an Expires attribute as well as a Max-Age attribute to avoid \ 
problems with Microsoft browsers that do not support the Max-Age attribute. \ 
(markt)

Jasper

    Fix: Follow up to the fix for 58178. When creating the ELContext for a tag \ 
file, ensure that any registered ELContextListeners are fired. (markt)
    Fix: Refactor code generated for JSPs to reduce the size of the code \ 
required for tags. (markt)
    Update: Update to the Eclipse JDT Compiler 4.6.1. (markt)

Cluster

    Add: Make the accessTimeout configurable in ClusterSingleSignOn. The \ 
accessTimeout is used as a timeout period for PING in replication map. (kfujino)
    Fix: 60806: To avoid ClassNotFoundException, make sure that the web \ 
application class loader is passed to ReplicatedContext. (kfujino)

WebSocket

    Fix: 60617: Correctly create a CONNECT request when establishing a WebSocket \ 
connection via a proxy. Patch provided by Svetlin Zarev. (markt)

Tribes

    Fix: Ensure that NoRpcChannelReply messages are not received on RpcCallback. \ 
(kfujino)

Other

    Update: Update the packaged version of the Tomcat Native Library to 1.2.12 \ 
to pick up the latest Windows binaries built with OpenSSL 1.0.2k. (violetagg)
    Add: 60784: Update all unit tests that test the HTTP status line to check \ 
for the required space after the status code. Patch provided by Michael Osipov. \ 
(markt)
    Update: Update the NSIS Installer used to build the Windows installer to \ 
version 3.01. (markt)