Path to this page:
Subject: CVS commit: pkgsrc/www/apache-tomcat9
From: Ryo ONODERA
Date: 2020-04-16 17:08:08
Message id: 20200416150808.3B671FB27@cvs.NetBSD.org
Log Message:
apache-tomcat9: Update to 9.0.34
Changelog:
The Apache Tomcat Project is proud to announce the release of version 9.0.34 of \
Apache Tomcat. The notable changes compared to 9.0.33 include:
Add support for default values when using ${...} property replacement in \
configuration files. Based on a pull request provided by Bernd Bohmann.
When configuring an HTTP Connector, warn if the encoding specified for \
URIEncoding is not a superset of US-ASCII as required by RFC 7230.
Replace the system property \
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the Connector \
attribute encodedSolidusHandling that adds an additional option to pass the %2f \
sequence through to the application without decoding it in addition to rejecting \
such sequences and decoding such sequences.
The Apache Tomcat Project is proud to announce the release of version 9.0.33 of \
Apache Tomcat. The notable changes compared to 9.0.31 include:
Add new attribute persistAuthentication to both StandardManager and \
PersistentManager to support authentication persistence. Patch provided by \
Carsten Klein
A zero length AJP secret will now behave as if it has not been specified.
Add the TLS request attributes used by IIS to the attributes that an AJP \
Connector will always accept.
The Apache Tomcat Project is proud to announce the release of version 9.0.31 of \
Apache Tomcat. The notable changes compared to 9.0.30 include:
AJP defaults changed to listen the loopback address, require a secret and to \
be disabled in the sample server.xml file. If you are using the AJP protocol, \
please refer to the Migration Guide and update your configuration.
The JmxRemoteLifecycleListener is now deprecated
The HTTP Connector attribute rejectIllegalHeaderName is renamed to \
rejectIllegalHeader and expanded to include header values as well as names
Files: