增加初始版本
diff --git a/webapps/docs/changelog.html b/webapps/docs/changelog.html
new file mode 100644
index 0000000..cdabfeb
--- /dev/null
+++ b/webapps/docs/changelog.html
@@ -0,0 +1,7464 @@
+<html><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Apache Tomcat 7 (7.0.42) - Changelog</title><meta name="author" content="Remy Maucherat"><meta name="author" content="Filip Hanik"><meta name="author" content="Rainer Jung"><meta name="author" content="Konstantin Kolinko"><meta name="author" content="Peter Rossbach"><meta name="author" content="Keiichi Fujino"><meta name="author" content="Tim Whittington"><meta name="author" content="Mladen Turk"><meta name="author" content="Christopher Schultz"><meta name="author" content="Sylvain Laurent"><meta name="author" content="Violeta Georgieva"><style type="text/css" media="print">

+            .noPrint {display: none;}

+            td#mainBody {width: 100%;}

+        </style><style type="text/css">

+            code {background-color:rgb(224,255,255);padding:0 0.1em;}

+            code.attributeName, code.propertyName {background-color:transparent;}

+        </style><style type="text/css">

+            .wrapped-source code { display: block; background-color: transparent; }

+            .wrapped-source div { margin: 0 0 0 1.25em; }

+            .wrapped-source p { margin: 0 0 0 1.25em; text-indent: -1.25em; }

+        </style><style type="text/css">

+            p.notice {

+                border: 1px solid rgb(255, 0, 0);

+                background-color: rgb(238, 238, 238);

+                color: rgb(0, 51, 102);

+                padding: 0.5em;

+                margin: 1em 2em 1em 1em;

+            }

+        </style></head><body bgcolor="#ffffff" text="#000000" link="#525D76" alink="#525D76" vlink="#525D76"><table border="0" width="100%" cellspacing="0"><!--PAGE HEADER--><tr><td><!--PROJECT LOGO--><a href="http://tomcat.apache.org/"><img src="./images/tomcat.gif" align="right" alt="

+      The Apache Tomcat Servlet/JSP Container

+    " border="0"></a></td><td><h1><font face="arial,helvetica,sanserif">Apache Tomcat 7</font></h1><font face="arial,helvetica,sanserif">Version 7.0.42, Jul 2 2013</font></td><td><!--APACHE LOGO--><a href="http://www.apache.org/"><img src="./images/asf-logo.gif" align="right" alt="Apache Logo" border="0"></a></td></tr></table><table border="0" width="100%" cellspacing="4"><!--HEADER SEPARATOR--><tr><td colspan="2"><hr noshade size="1"></td></tr><tr><!--LEFT SIDE NAVIGATION--><td width="20%" valign="top" nowrap class="noPrint"><p><strong>Links</strong></p><ul><li><a href="index.html">Docs Home</a></li><li><a href="http://wiki.apache.org/tomcat/FAQ">FAQ</a></li><li><a href="#comments_section">User Comments</a></li></ul><p><strong>User Guide</strong></p><ul><li><a href="introduction.html">1) Introduction</a></li><li><a href="setup.html">2) Setup</a></li><li><a href="appdev/index.html">3) First webapp</a></li><li><a href="deployer-howto.html">4) Deployer</a></li><li><a href="manager-howto.html">5) Manager</a></li><li><a href="realm-howto.html">6) Realms and AAA</a></li><li><a href="security-manager-howto.html">7) Security Manager</a></li><li><a href="jndi-resources-howto.html">8) JNDI Resources</a></li><li><a href="jndi-datasource-examples-howto.html">9) JDBC DataSources</a></li><li><a href="class-loader-howto.html">10) Classloading</a></li><li><a href="jasper-howto.html">11) JSPs</a></li><li><a href="ssl-howto.html">12) SSL</a></li><li><a href="ssi-howto.html">13) SSI</a></li><li><a href="cgi-howto.html">14) CGI</a></li><li><a href="proxy-howto.html">15) Proxy Support</a></li><li><a href="mbeans-descriptor-howto.html">16) MBean Descriptor</a></li><li><a href="default-servlet.html">17) Default Servlet</a></li><li><a href="cluster-howto.html">18) Clustering</a></li><li><a href="balancer-howto.html">19) Load Balancer</a></li><li><a href="connectors.html">20) Connectors</a></li><li><a href="monitoring.html">21) Monitoring and Management</a></li><li><a href="logging.html">22) Logging</a></li><li><a href="apr.html">23) APR/Native</a></li><li><a href="virtual-hosting-howto.html">24) Virtual Hosting</a></li><li><a href="aio.html">25) Advanced IO</a></li><li><a href="extras.html">26) Additional Components</a></li><li><a href="maven-jars.html">27) Mavenized</a></li><li><a href="security-howto.html">28) Security Considerations</a></li><li><a href="windows-service-howto.html">29) Windows Service</a></li><li><a href="windows-auth-howto.html">30) Windows Authentication</a></li><li><a href="jdbc-pool.html">31) Tomcat's JDBC Pool</a></li><li><a href="web-socket-howto.html">32) WebSocket</a></li></ul><p><strong>Reference</strong></p><ul><li><a href="RELEASE-NOTES.txt">Release Notes</a></li><li><a href="config/index.html">Configuration</a></li><li><a href="api/index.html">Tomcat Javadocs</a></li><li><a href="servletapi/index.html">Servlet Javadocs</a></li><li><a href="jspapi/index.html">JSP 2.2 Javadocs</a></li><li><a href="elapi/index.html">EL 2.2 Javadocs</a></li><li><a href="http://tomcat.apache.org/connectors-doc/">JK 1.2 Documentation</a></li></ul><p><strong>Apache Tomcat Development</strong></p><ul><li><a href="building.html">Building</a></li><li><a href="changelog.html">Changelog</a></li><li><a href="http://wiki.apache.org/tomcat/TomcatVersions">Status</a></li><li><a href="developers.html">Developers</a></li><li><a href="architecture/index.html">Architecture</a></li><li><a href="funcspecs/index.html">Functional Specs.</a></li><li><a href="tribes/introduction.html">Tribes</a></li></ul></td><!--RIGHT SIDE MAIN BODY--><td width="80%" valign="top" align="left" id="mainBody"><h1>Changelog</h1><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)"><!--()--></a><a name="Tomcat_7.0.42_(markt)"><strong>Tomcat 7.0.42 (markt)</strong></a></font></td></tr><tr><td><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.42_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Enforce the restriction described in section 4.4 of the Servlet 3.0

+        specification that requires the new pluggability methods only to be

+        available to <code>ServletContextListener</code>s defined in one of the

+        specified ways. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Better handle FORM authentication when requesting a resource as an

+        unauthenticated user that is only protected for a sub-set of HTTP

+        methods that does not include GET. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53777">53777</a>: Add support for a JAAS Realm instance to use a

+        dedicated configuration rather than the JVM global JAAS configuration.

+        This is most likely to be useful for per web application JAAS Realms.

+        Based on a patch by eolivelli. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54745">54745</a>: Fix JAR file scanning when Tomcat is deployed via Java

+        Web Start. Patch provided by Nick Williams. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55017">55017</a>: Add the ability to configure the RMI bind address when

+        using the JMX remote lifecycle listener. Patch provided by Alexey

+        Noskov. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55071">55071</a>: Ensure original exception is reported if JDBC Realm

+        fails to read a user's credentials. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55073">55073</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55108">55108</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55109">55109</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55110">55110</a>,

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55158">55158</a> &amp; <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55159">55159</a>: Small performance improvements.

+        Patches provided by Adrian Nistor. (markt/violetagg)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55102">55102</a>: Add support for time to first byte in the

+        AccessLogValve. Patch provided by Jeremy Boynes. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55125">55125</a>: If the Server container fails to start, don't allow

+        the Catalina wrapper to start (used when running from the command line

+        and when running as a service) since Tomcat will not be able to do any

+        useful work. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update the <code>JreMemoryLeakPreventionListener</code> to take account

+        of changes in the behaviour of

+        <code>java.beans.Introspector.flushCaches()</code> and

+        <code>sun.awt.AppContext.getAppContext()</code> in Java 7. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid WARNING log message of

+        <code>Users:type=UserDatabase,database=UserDatabase</code> at Tomcat

+        shutdown. (pero)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid <code>ClassCastException</code> when an asynchronous dispatch is

+        invoked in an asynchronous cycle which is started by a call to

+        <code>ServletRequest.startAsync(ServletRequest,ServletResponse)</code>

+        where ServletRequest/ServletResponse are custom implementations.

+        (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression introduced in 7.0.39 (refactoring of base 64

+        encoding and decoding) that broke the JNDI Realm when

+        <code>userPassword</code> was set and passwords were hashed with MD5 or

+        SHA1. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the mechanism for the path calculation in

+        <code>AsyncContext.dispatch()</code>. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55155">55155</a>: Avoid constant focus grabbing when running the Tomcat

+        unit tests under Java 6 on OSX. Patch provided by Casey Lucas. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55160">55160</a>: Don't ignore connectionUploadTimeout setting when

+        using HTTP NIO connector. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55176">55176</a>: Correctly handle regular expressions within SSI

+        expressions that contain an equals character. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.42_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55177">55177</a>: Correctly handle infinite soTimeout for BIO HTTP

+        connector. Based on a patch by Nick Bunn. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55180">55180</a>: Correctly handle infinite soTimeout when

+        <code>disableUploadTimeout</code> is set to false. Patch provided by

+        Nick Bunn. (violetagg)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.42_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Delete leftover of war file from tempDir when removing invalid

+        <code>FileMessageFactory</code>. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that the keepAlive of NioSender works correctly when

+        <code>keepAliveCount</code>/<code>keepAliveTime</code> is set to a value

+        greater than 0. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add logging of when a member is unable to join the cluster. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Replace Tribes's <code>TaskQueue</code> as executor's

+        workQueue in order to ensure that executor's <code>maxThread</code>

+        works correctly. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54086">54086</a>: Fix an additional code path that could lead to

+        multiple threads attempting to modify the same selector key set. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.42_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Complete the document for <code>MessageDispatch15Interceptor</code>.

+        (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53655">53655</a>: Document the circumstances under which Tomcat will add

+        a <code>javax.mail.Authenticator</code> to mail sessions created via a

+        JNDI resource. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55179">55179</a>: Correct the Javadoc for the remote IP valve so the

+        correct name is used to refer to the <code>proxiesHeader</code>

+        property. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.42_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55031">55031</a>: Fixed <code>Export-Package</code> header and

+        <code>uses</code> directives in MANIFEST.MF. Change the version for

+        package <code>org.apache.juli.logging</code> to "0" in

+        <code>Import-Package</code> header. Thus any version of that package

+        can be used. Patch provided by Martin Lichtin. (violetagg)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.42 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.42_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Maven Cental location used to download dependencies at build time

+        to be <code>repo.maven.apache.org</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update JUnit to version 4.11. Configure separate download for Hamcrest

+        1.3 core library as its classes are no longer included in junit.jar.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54013">54013</a>: When using a forced stop, allow a short period of time

+        (5s) for the process to die before returning. Patch provided by

+        mukarram.baig. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55119">55119</a>: Ensure that the build process produces Javadoc that is

+        not vulnerable to CVE-2013-1571. Based on a patch by Uwe Schindler.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.41 (markt)"><!--()--></a><a name="Tomcat_7.0.41_(markt)"><strong>Tomcat 7.0.41 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2013-06-10</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.41 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.41_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54703">54703</a>: Make parsing of HTTP Content-Type headers tolerant of

+        any CR or LF characters that appear in the value passed by the

+        application. Also fix some whitespace parsing issues identified by the

+        additional test cases. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent possible WAR file locking when reading a context.xml file from

+        an unexpanded WAR file. Note that in normal usage, the

+        <code>JreMemoryLeakPreventionListener</code> would protect against this.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that when auto deployment runs for a Host, it uses the latest

+        values for copyXML, deployXML and unpackWARs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54939">54939</a>: Provide logging (using a UserDataHelper) when HTTP

+        header parsing fails (e.g. when maxHeaderCount is exceeded). (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54944">54944</a>: Enhancements to the unit tests for FORM

+        authentication. Patch provided by Brian Burch. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54955">54955</a>: When a reload of the application is performed ensure

+        that a subsequent request to the context root does not result in a 404

+        response. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54971">54971</a>: Ensure that the correct location is used when writing

+        files via <code>javax.servlet.http.Part.write(String)</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54974">54974</a>: Ensure that 

+        <code>SessionCookieConfig#set&lt;methods&gt;</code>

+        will throw <code>IllegalStateException</code> if the

+        <code>ServletContext</code> from which this 

+        <code>SessionCookieConfig</code> was acquired has already been

+        initialized. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54981">54981</a>: Ensure that

+        <code>ServletContext#getJspConfigDescriptor()</code> will return

+        <code>null</code> when there is no jsp configuration provided by

+        web.xml/web-fragment.xml. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that when Tomcat's anti-resource locking features are used

+        that the temporary copy of the web application and not the original is

+        removed when the web application stops. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54984">54984</a>: Use the correct encoding when processing a form data

+        posted as multipart/form-data even when the request parameters are not

+        parsed. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54999">54999</a>: The old JSESSIONIDSSO needs to be removed when SSO is

+        being used and logout() and login() occur within a single request. Patch

+        provided by Keith Mashinter. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55035">55035</a>: Add support for the version attribute to the deploy

+        command of the Ant tasks for interfacing with the text based Manager

+        application. Patch provided by  Sergey Tcherednichenko. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55046">55046</a>: Add a Servlet Filter that implements

+        <a href="http://www.w3.org/TR/cors/">CORS</a>. Patch

+        provided by Mohit Soni. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=55052">55052</a>: JULI's LogManager now additionally looks for

+        logging properties without prefixes if the property cannot be found with

+        a prefix. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that only the first asynchronous dispatch operation for a given

+        asynchronous cycle will be performed. Any subsequent asynchronous

+        dispatch operation for the same asynchronous cycle will be ignored and

+        <code>IllegalStateException</code> will be thrown. (violetagg)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.41 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.41_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54947">54947</a>: Fix the HTTP NIO connector that incorrectly rejected a

+        request if the CRLF terminating the request line was split across

+        multiple packets. Patch by Konstantin Prei&szlig;er. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.41 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.41_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54964">54964</a>: Allow tag plug-ins to be packaged with a web

+        application. Patch provided by Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54968">54968</a>: Return the correct version number (2.2) of the JSP

+        specification that is supported by the JSP engine when

+        <code>javax.servlet.jsp.JspEngineInfo#getSpecificationVersion()</code>

+        is invoked. (violetagg) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.41 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.41_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add <code>maxValidTime</code> attribute to prevent the leak of

+        <code>FileMessageFactory</code> in <code>FarmWarDeployer</code>.

+        (kfujino)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Simplify the code of <code>ReplicationValve</code>: Rather than get

+        cluster instance from container on every request, use instance variable.

+        (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add <code>maxWait</code> attribute that the senderPool will wait when

+        there are no available senders. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve error message by including specified timeout if failed to

+        retrieve a data sender. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add <code>removeSuspectsTimeout</code> attribute in order to remove a

+        suspect node in TcpFailureDetector. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.41 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.41_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54931">54931</a>: Add information to the Window Service how-to about

+        installing and running multiple instances. Based on a patch by Chris

+        Derham. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54932">54932</a>: Correct the link to Tribes documentation. (violetagg)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add document for

+        <code>o.a.c.tribes.group.interceptors.TcpFailureDetector</code>.

+        (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)"><!--()--></a><a name="Tomcat_7.0.40_(markt)"><strong>Tomcat 7.0.40 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2013-05-09</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.40_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Tomcat's internal copy of Commons FileUpload to FileUpload 1.3.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54178">54178</a>: Protect against <code>AsyncListener</code>

+        implementations that throw <code>RuntimeException</code>s in response to

+        an event. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54791">54791</a>: Restore <code>tools.jar</code> entry in

+        <code>jarsToSkip</code> property to prevent warnings when running Tomcat

+        from Eclipse. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54851">54851</a>: When scanning for web fragments, directories without

+        any web-fragment.xml should not impact the status of distributable

+        element. Patch provided by Trask Stalnaker. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When an error occurs during the sending of a WebSocket message, notify

+        the Inbound side (where all the events occur that the application reacts

+        to) that an error has occurred and that the connection is being closed.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54906">54906</a>: Better error message if a

+        <code>ConcurrentModificationException</code> occurs while checking for

+        memory leaks when a web application stops. Also ensure that the

+        exception does not cause remaining checks to be skipped. Based on a

+        patch by NateC.

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Allow 204 responses (no content) to include entity headers as required

+        by RFC2616. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.40_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure write errors when using HTTP Upgrade with the APR/native

+        connector result in <code>IOException</code>s rather than errors being

+        silently swallowed. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.40_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54802">54802</a>: Provide location information for exceptions thrown

+        by JspDocumentParser. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54801">54801</a>: Do not attempt to parse text that looks like an EL

+        expressions inside a scriptlet in a JSP document because EL expressions

+        are not permitted in scriptlets. (kkolinko/markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54821">54821</a>: Do not attept to parse text that looks like an EL

+        expressions in a JSP document if EL expressions have been disabled.

+        (kkolinko/markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54888">54888</a>: Add support for CSV lists with the ForEach tag plugin.

+        Patch provided by Sheldon Shao. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.40_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add several improvements for FarmWarDeployer. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.40_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54872">54872</a>: Correct Cluster Receiver page of Tomcat

+        documentation. (violetagg)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.40_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Document <code>StatementCache</code> interceptor. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix minor threading issue in <code>ConnectionPool</code>.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54732">54732</a>: Fix leak of statements in <code>StatementCache</code>

+        interceptor. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix NPE in <code>SlowQueryReportJmx</code> when running

+        <code>TestSlowQueryReport</code> test. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.40 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.40_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Eclipse JDT Compiler 4.2.2. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54890">54890</a>: Update to Apache Commons Daemon 1.0.15. (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Convert remaining unit tests to JUnit 4 and enable Checkstyle rule

+        that forbids use of methods from JUnit 3. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove unneeded permissions for reading UserDataHelper properties

+        from <code>catalina.policy</code> file. The class that needed those

+        was moved in 7.0.26. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.39 (markt)"><!--()--></a><a name="Tomcat_7.0.39_(markt)"><strong>Tomcat 7.0.39 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2013-03-26</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.39 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.39_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure a log message is generated when a web application fails to start

+        due to an error processing a ServletContainerInitializer. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent NPE in JAR scanning when running in an environment where the

+        bootstrap class loader is not an ancestor of the web application class

+        loader such as OSGi environments. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that, if a call to UEncoder#encodeURL is made, all internal

+        structures are properly cleaned. (violetagg)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54660">54660</a>: Enable the modification of an access log's

+        <code>fileDateFormat</code> attribute while the access log is in use.

+        The change will take effect when the next entry is made to the access

+        log. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Tomcat's internal copy of Commons FileUpload to FileUpload trunk,

+        revision 1458500 and the associated extract from Commons IO to 2.4.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54702">54702</a>: Prevent file descriptors leak and ensure that files

+        are closed when parsing web application deployment descriptors.

+        (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54707">54707</a>: Further relax the parsing of DIGEST authentication

+        headers to allow for buggy clients that quote values that RFC2617 states

+        should not be quoted. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Enable support for MBeans with multiple operations with the same name

+        but different signatures. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Deprecate Tomcat's internal Base 64 encoder/decoder and switch to

+        using a package renamed copy of the Commons Codec implementation.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that StandardJarScanner#scan will use the provided class loader

+        when scanning the class loader hierarchy. (violetagg)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.39 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.39_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54690">54690</a>: Fix a regression caused by the previous fix for

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54406">54406</a>. If no values are specified for sslEnabledProtocols or

+        ciphers use the default values for server sockets rather than the

+        default values for client sockets. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.39 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.39_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Correct Deployer, Manager and Context pages of Tomcat documentation.

+        (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.39 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.39_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52318">52318</a>: Version for imported package

+        <code>org.apache.juli.logging</code> is extended to include also 7.0.x

+        versions. The fix is applicable only when running in OSGi environment.

+        Patch provided by Martin Lichtin. (violetagg)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54599">54599</a>: Do not print connection password in

+        <code>PoolProperties.toString()</code>. Based on a patch by

+        Daniel Mikusa. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54684">54684</a>: Add <code>javax.naming.spi</code> to 

+        <code>Import-Package</code> header in MANIFEST.MF in order to resolve

+        <code>ClassNotFoundException</code> when running in OSGi environment.

+        (violetagg)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.39 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.39_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.14 to resolve <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54609">54609</a>

+        which meant that installation of Windows service could fail

+        producing incorrect service launch command. (mturk)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure HEAD requests return the correct content length when the

+        requested resource uses a Writer. Patch by Nick Williams. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.38 (markt)"><!--()--></a><a name="Tomcat_7.0.38_(markt)"><strong>Tomcat 7.0.38 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.38 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.38_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that the request start time (used by the access log valve to

+        calculate request processing time) is correctly recorded for the HTTP

+        NIO connector. In some cases the request processing time may have been

+        longer than that recorded. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add one more library from JDK 7 to the value of <code>jarsToSkip</code>

+        property in the <code>catalina.properties</code> file. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53871">53871</a>: If annotation scanning results in a

+        <code>StackOverflowError</code> due to broken class dependencies, add

+        the class hierarchy that triggered the exception to the error message.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add a new option to the standard JarScanner implementation

+        (<code>scanBootstrapClassPath</code>) to control if the bootstrap

+        classpath is scanned or not. By default, it will not be scanned. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Provide more consolidated servlet MBean data in the webapp MBean.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54584">54584</a>: Take account of the delegate attribute when building

+        the web application class path to pass to the JSP compiler. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Copy the updated and re-packaged UTF-8 decoder from Tomcat 8.0.x and use

+        this improved decoder for WebSocket connections. Remove the WebSocket

+        specific UTF-8 decoder. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54602">54602</a>: Recycle the byte to character converter used for URIs

+        between requests to ensure an error in one request does not trigger a

+        failure in the next request. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use the newly added improved UTF-8 decoder for decoding UTF-8 encoded

+        URIs and UTF-8 encoded request bodies. Invalid UTF-8 URIs will not

+        cause an error but will make use of the replacement character when an

+        error is detected. This will allow web applications to handle the URI

+        which will most likely result in a 404 response. The fall-back to

+        decoding with ISO-8859-1 if UTF-8 decoding fails has been removed.

+        Invalid UTF-8 sequences in a request body will trigger an IOException.

+        The way the decoder is used has also been improved. The notable change

+        is that invalid sequences at the end of the input now trigger an error

+        rather than being silently swallowed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54624">54624</a>: Ensure that the correct request body length is used

+        when swallowing a request body after FORM authentication prior to

+        restoring the original request preventing possible hanging when

+        restoring POST requests submitted over AJP. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54628">54628</a>: When writing binary WebSocket messages write from

+        start position in array rather than the start of the array. Patch

+        provided by blee. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.38 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.38_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Refactor char encoding/decoding using NIO APIs. (remm)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.38 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.38_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54203">54203</a>: Complete the Javadoc for

+        <code>javax.servlet.http.Part</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54638">54638</a>: Fix display of "Used" memory value for memory pools

+        on the status page in Manager web application when the page is rendered

+        as XML. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct typos in configuration samples on SSL Configuration page

+        of Tomcat documentation. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Disable support for comments on Changelog page of Tomcat

+        documentation. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix several issues with <code>status.xsd</code> schema in Manager web

+        application, testing it against actual output of StatusTransformer

+        class. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Clarify the documentation on how context paths may be configured for web

+        applications. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.38 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.38_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54601">54601</a>: Change <code>catalina.sh</code> to consistently use

+        <code>LOGGING_MANAGER</code> variable to configure logging,

+        instead of modifying <code>JAVA_OPTS</code> one. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.37 (markt)"><!--()--></a><a name="Tomcat_7.0.37_(markt)"><strong>Tomcat 7.0.37 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2013-02-18</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.37 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.37_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54521">54521</a>: Ensure that concurrent requests that require a DIGEST

+        authentication challenge receive different nonce values. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54534">54534</a>: Ensure that, if a call to

+        <code>StandardWrapper#isSingleThreadModel()</code> triggers the loading

+        of a Servlet, the correct class loader is used. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54536">54536</a>: Ensure the default error page is displayed if a custom

+        HTTP status code is used when calling

+        <code>HttpServletResponse#sendError(int, String)</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.37 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.37_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54456">54456</a>: Ensure that if a client aborts a request when sending

+        a chunked request body that this is communicated correctly to the client

+        reading the request body. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the native component of the APR/native connector to 1.1.27 and

+        make that version the recommended minimum version. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.37 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.37_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54239">54239</a>: Enable web applications to provide their own

+        Expression Language interpreter to enable them to optimise processing of

+        expressions. Based on a patch by Sheldon Shao. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.37 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.37_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54505">54505</a>: Create clearer links from the JNDI How-To to the

+        Tomcat specific options for configuring JNDI resources. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.37 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.37_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.13. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)"><!--()--></a><a name="Tomcat_7.0.36_(markt)"><strong>Tomcat 7.0.36 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make additional allowances for buggy client implementations of HTTP

+        DIGEST authentication. This is a follow-on to <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54060">54060</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54438">54438</a>: Fix a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52953">52953</a> that

+        triggered a NPE when digested passwords were used and an authentication

+        attempt was made for a user that did not exist in the realm. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54448">54448</a>: Correctly handle <code>@Resource</code> annotations on

+        primitives. Patch provided by Violeta Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54450">54450</a>: Correctly handle resource injection when part of the

+        servlet properties uses <code>@Resource</code> and the other uses

+        <code>injection-target</code>. Patch provided by  Violeta Georgieva.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54458">54458</a>: Include exception when logging errors in the

+        DataSourceRealm. Patch provided by  Violeta Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54483">54483</a>: Correct one of the Spanish translations. Based on a

+        suggestion from adinamita. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent the SSO deregister when web application is stopped or reloaded.

+        When StandardManager(pathname="") or DeltaManager stops normally, all

+        sessions in the context are expired.

+        In this case, because most sessions is not time-out, SSO deregister was

+        triggered. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Include the exception in the log message if the parsing of the

+        context.xml file fails. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54497">54497</a>: Make memory leak detection code more robust so a

+        failure in the leak detection code does not prevent the Context from

+        stopping unless the error is fatal to the JVM. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54507">54507</a>: Do not start the background thread that is used for

+        expiring sessions (amongst other things) until the web application is

+        fully started. Stop the background thread as soon as the web application

+        is stopped. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Allow WebSocket Ping/Pong messages to be sent between fragments of a

+        fragmented message. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54612">54612</a>: Check if the socket is closed before trying to write a

+        WebSocket message to it. Also, flush any partial buffered data before

+        closing the socket. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54324">54324</a>: Allow APR connector to disable TLS compression

+        if OpenSSL supports it. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54406">54406</a>: Fix NIO HTTPS connector to prune specified <code>

+        ciphers</code> and <code>sslEnableProtocols</code> options to those

+        supported by the SSL implementation, sharing logic with the BIO

+        connector. Modified ciphers and sslEnabledProtocols option pruning to

+        not silently revert to JVM defaults when none of the options specified

+        are supported - new behaviour is to warn and explicitly enable no

+        options. (timw)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Align NIO HTTP connector with other HTTP connectors and include leading

+        blank lines when determining the size of the HTTP headers. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53869">53869</a>: Performance improvement for pages with lots of heavily

+        nested tags. Retain a reference to the root JSP context rather than

+        traversing the hierarchy on every call. Based on a patch suggested by

+        Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54440">54440</a>: Correct a regression caused by the changes for

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54240">54240</a> that broke compilation of JSPs with JspC. Patch

+        provided by Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54466">54466</a>: Improve error message by including the name of the

+        file when the java file generated from a tag file cannot be compiled.

+        Based on a patch by Sheldon Shao. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix incorrect increment of <code>counterSend_EVT_SESSION_EXPIRED</code>

+        and <code>counterSend_EVT_CHANGE_SESSION_ID</code>. These values are not

+        incremented if no members active in cluster group. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54476">54476</a>: Correct error in Javadoc of GroupChannel send methods

+        to maker clear that the minimum length of the destination member array

+        is one, not two. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent SSO deregister when node shutdown normally in cluster

+        environment. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Check cluster member before sending replicate message in

+        ClusterSingleSignOn. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54461">54461</a>: Improve the documentation for the compiler attribute

+        in the Jasper how-to. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add Jespa to the list of third-party Windows authentication providers

+        and make external links in the documentation for those providers

+        <code>no-follow</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Tribes"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Tribes"><strong>Tribes</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54496">54496</a>: Don't use a hard-coded class name in

+        <code>MemberImpl.toString()</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.36 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.36_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.12. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.35 (markt)"><!--()--></a><a name="Tomcat_7.0.35_(markt)"><strong>Tomcat 7.0.35 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2013-01-16</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.35 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.35_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54247">54247</a>: Prevent <code>ClassNotFoundException</code>s on stop

+        when running as a service. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54249">54249</a>: Ensure resource properties are available when the

+        context path contains encoded characters such as a space. This triggered

+        compilation issues in Jasper. Patch provided by Polina Genova. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54256">54256</a>: Improve error reporting when a JAR file fails

+        extension validation by including the name of the JAR file in the

+        exception. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Allow web applications to be stopped cleanly even if filters throw

+        exceptions when their destroy() method is called. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix memory leak of servlet instances when running with a

+        SecurityManager and either init() or destroy() methods fail

+        or the servlet is a SingleThreadModel one. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Cleanup method cache lookup code in <code>SecurityUtil</code> class.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make the Tomcat 7 non-JSR356 WebSocket implementation non-blocking

+        (where supported by the connector) between the HTTP upgrade and the

+        first WebSocket message from the client to the server. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54262">54262</a>: Ensure that an empty

+        <code>&lt;absolute-ordering /&gt;</code> element in the main web.xml

+        file disables scanning for web fragments. Based on a patch by  Violeta

+        Georgieva. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54284">54284</a>: As per clarification from the Servlet EG, anonymous

+        Filters and Servlets are not permitted. Patch by Violeta Georgieva.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54371">54371</a>: Prevent exceptions when processing web fragments for

+        unexpanded WAR files when the context path contains characters that

+        need to be encoded in URLs such as spaces. Based on a patch by Polina

+        Genova. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54372">54372</a>: Make HTTP Digest authentication header parsing

+        tolerant of invalid headers sent by known buggy clients. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54377">54377</a>: Correctly set request attributes for AccessLog in

+        RemoteIpFilter. Patch by Violeta Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54379">54379</a>: Implement support for post-construct and pre-destroy

+        elements in web.xml. Patch by Violeta Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54380">54380</a>: Do not try to register servlets or contexts into the

+        mapper too early (which just caused a warning to be logged). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix NPE in <code>WebappLoader.stopInternal</code> when stop is called

+        after a failed start. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54381">54381</a>: Add support for receiving WebSocket pong messages.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54382">54382</a>: Fix NPE when SSI processing is enabled and an empty

+        SSI directive is present. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix <code>ArrayIndexOutOfBoundsException</code> in

+        <code>HttpParser</code> when parsing incorrect HTTP headers. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54387">54387</a>: Deployment must fail when multiple servlets are mapped

+        to the same url-pattern. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54391">54391</a>: Provide a value for the

+        <code>javax.servlet.context.orderedLibs</code> attribute. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.35 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.35_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54248">54248</a>: Ensure that byte order marks are swallowed when using

+        a Reader to read a request body with a BOM for those encodings that

+        require byte order marks. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix release of processors in <code>AjpNioProtocol</code>. Wrong object

+        was used as a key in the connections map. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.35 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.35_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54240">54240</a>: Add support for auto-detection and configuration of

+        JARs on the classpath that provide tag plug-in implementations. Based on

+        a patch by Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54241">54241</a>: Revert the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=35410">35410</a> as it was not

+        compliant with the JSP specification, specifically that

+        <code>&lt;%= obj %&gt;</code> must be translated to

+        <code>out.print(obj)</code> which in turn becomes

+        <code>out.write(String.valueOf(obj))</code>. This will trigger a

+        <code>NullPointerException</code> if <code>obj.toString()</code> returns

+        <code>null</code>. The fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=35410">35410</a> incorrectly suppressed

+        the <code>NullPointerException</code> in this case. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54242">54242</a>: Correct handle null iterations with in the JSTL

+        ForEach tag plug-in implementation. Patch provided by Sheldon Shao.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54260">54260</a>: Avoid <code>NullPointerException</code> when using

+        JSP unloading and tag files. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54370">54370</a>: Improve handling of nulls when trying to match sets of

+        parameters to a method in EL. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54338">54338</a>: Correctly coerce the value to the expected type when

+        using the tag plug-in for the JSTL set tag. Patch provided by Sheldon

+        Shao. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.35 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.35_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54244">54244</a>: Clarify the documentation for the BIO and NIO SSL

+        configuration attributes <code>sslEnabledProtocols</code> and

+        <code>sslProtocol</code> within the documentation web application.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Integrate documentation of Tomcat 7 with Apache Comments System.

+        People can leave their comments when reading documentation online

+        at the <a href="http://tomcat.apache.org/">tomcat.apache.org</a>

+        site. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.35 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.35_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54390">54390</a>: Use 'java_home' on Mac OS X to auto-detect JAVA_HOME.

+        (schultz)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.34 (markt)"><!--()--></a><a name="Tomcat_7.0.34_(markt)"><strong>Tomcat 7.0.34 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2012-12-12</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.34 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.34_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53871">53871</a>: Improve error message if annotation scanning fails

+        during web application start due to poor configuration or illegal

+        cyclic inheritance with the application's classes. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix unit test for AccessLogValve when using non-GMT time zone. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54170">54170</a>: Ensure correct registration of Filters and Servlets in

+        the JMX registry if the Filter or Servlet name includes a character that

+        must be quoted if used in an ObjectName value. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add new attribute <code>renameOnRotate</code> to the AccessLogValve.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54190">54190</a>: Correct unit tests for BASIC authentication so that

+        session timeout is correctly tested. Also refactor unit test to make it

+        easier to add additional tests. Patch by Brian Burch. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54220">54220</a>: Ensure the ErrorReportValve only generates an error

+        report if the error flag on the response has been set. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Simplify time zone handling in the access log valve and correctly handle

+        various edge cases for non-standard DST changes. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.34 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.34_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54198">54198</a>: Clarify that

+        <code>HttpServletResponse.sendError(int)</code> results in an HTML

+        response by default. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54207">54207</a>: Correct JNDI factory package name in Javadoc for

+        <code>org.apache.naming.java.javaURLContextFactory</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.34 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.34_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Fix a handful of Eclipse warnings in the JDBC pool source code including

+        the warnings reported in <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53565">53565</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54150">54150</a>: Make sure that SlowQueryReportJmx mbean deregistered

+        during webapp shutdown. Reported by Alex Franken. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54194">54194</a>: Make sure that connection pool mbean is not registered

+        when jmxEnabled is false. Patch provided by tobias.gierke. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.34 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.34_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Eclipse JDT Compiler 4.2.1. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)"><!--()--></a><a name="Tomcat_7.0.33_(markt)"><strong>Tomcat 7.0.33 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2012-11-21</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.33_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53960">53960</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54115">54115</a>: Extensions to HttpClient test

+        helper class. Patches by Brian Burch. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53993">53993</a>: Avoid a possible NPE in the AccessLogValve when the

+        session ID is logged and a session is invalidated. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add support for LAST_ACCESS_AT_START system property to

+        PersistentManager. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Update MIME type mapping with additional / updated mime.types from the

+        Apache web server. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54007">54007</a>: Fix a memory leak that prevented deletion of a

+        context.xml file associated with a Context that had failed to deploy.

+        Also fix the problems uncovered with undeploying such a Context once the

+        leak had been fixed and the file could be deleted. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54044">54044</a>: Correct bug in timestamp cache used by logging

+        (including the access log valve) that meant entries could be made with

+        an earlier timestamp than the true timestamp. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54054">54054</a>: Do not share shell environment variables between

+        multiple instances of the CGI servlet. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54060">54060</a>: Use a simple parser rather than a regular expression

+        to parse HTTP Digest authentication headers so the header is correctly

+        parsed. The new approach is also faster and generates less garbage.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54068">54068</a>: Rewrite the web fragment ordering algorithm to resolve

+        multiple issues that resulted in incorrect ordering or failure to find

+        a correct, valid order. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        The HTTP header parser added to address <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52811">52811</a> has been

+        removed and replaced with the light-weight HTTP header parser created to

+        address <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54060">54060</a>. The new parser includes a work-around for a

+        bug in the Adobe Acrobat Reader 9.x plug-in for Microsoft Internet

+        Explorer that was identified when the old parser was introduced

+        (<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53814">53814</a>).  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54076">54076</a>: Add an alternative work-around for clients that use

+        SPNEGO authentication and expect the authenticated user to be cached

+        per connection (Tomcat only does this if an HTTP session is available).

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54087">54087</a>: Correctly handle (ignore) invalid If-Modified-Since

+        header rather than throwing an exception. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54096">54096</a>: In web.xml, &lt;env-entry&gt; should accept any type

+        that has a constructor that takes a single String or char. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54127">54127</a>: Add support for sending a WebSocket Ping. Patch

+        provided by Sean Winterberger. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In FormAuthenticator: If it is configured to change Session IDs,

+        do the change before displaying the login form. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure <code>AsyncListener.timeout()</code> and

+        <code>AsyncListener.complete()</code> are called with the correct

+        thread context class loader. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54123">54123</a>: If an asynchronous request times out without any

+        <code>AsyncListener</code>s defined, a 500 error will be triggered.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54124">54124</a>: Correct provided value of request attribute

+        <code>javax.servlet.async.request_uri</code> and add missing request

+        attribute <code>javax.servlet.async.path_info</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add <code>denyStatus</code> initialization parameter to

+        <code>CsrfPreventionFilter</code>, allowing to customize the HTTP

+        status code used for denied requests. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54141">54141</a>: Increase the permitted number of nested Realm levels

+        from 2 to 3 by default and make the limit configurable via a system

+        property. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Revert occasional API change in <code>BaseDirContext</code> class that

+        was done in 7.0.32. Methods should not be <code>final</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent failures in the AccessLogValve when running under a

+        SecurityManager and the first request received is an asynchronous one.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.33_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct an issue that prevented WebSockets from being used over SSL when

+        using the HTTP NIO connector. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+       <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54022">54022</a>: Ensure the Comet END event is triggered on client

+       disconnect with APR/native on Windows Vista/2k8 or later. Patch provided

+       by Douglas Beachy. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54067">54067</a>: Ensure responses with 1xx response codes are correctly

+        marked as not containing an entity body. This caused an issue for some

+        WebSocket clients when an Transfer-Encoding header was sent with the

+        101 (HTTP upgrade) response. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.33_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53867">53867</a>: Optimise the XML escaping provided by the PageContext

+        implementation. Based on a patch by Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53896">53896</a>: Use an optimised CompositeELResolver for Jasper that

+        skips resolvers that are known to be unable to resolve the value. Patch

+        by Jarek Gawor. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53986">53986</a>: Correct a regression introduced by the fix for

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53713">53713</a>. JSP comments that ended with the sequence ---%&gt; (or

+        any similar sequence with a odd number of - characters) was not

+        correctly parsed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54011">54011</a>: Fix a bug in the tag plug-in for

+        <code>&lt;c:out&gt;</code> that triggered a JSP compilation error if the

+        <code>escapeXml</code> attribute was used. Patch provided by Sheldon

+        Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Follow up to <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54011">54011</a>. Simplify generated code for

+        <code>&lt;c:out&gt;</code>. Based on a patch by Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54012">54012</a>: Fix a bug in the tag plug-in infrastructure that meant

+        the <code>&lt;c:set&gt;</code> triggered a JSP compilation error when

+        used in a tag file. Based on a patch provided by Sheldon Shao. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54017">54017</a>: Simplify coercion of <code>String</code> instances to

+        <code>Object</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54144">54144</a>: Fix a bug in the tag plug-in for

+        <code>&lt;c:out&gt;</code> that meant that if the value of the tag

+        evaluated to a <code>java.io.Reader</code> object then it was not

+        correctly handled. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.33_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add getSessionIdsFull operation to mbeans-descriptor. listSessionIdsFull

+        no longer exist. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54086">54086</a>: Fix threading issue when stopping an 

+        <code>NioReceiver</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.33_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54143">54143</a>: Add display of the memory pools usage (including

+        PermGen) to the Status page of the Manager web application. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.33 (markt)/Tribes"><!--()--></a><a name="Tomcat_7.0.33_(markt)/Tribes"><strong>Tribes</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=54045">54045</a>: Make sure getMembers() returns available member when

+        TcpFailureDetector works in static cluster. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.32 (markt)"><!--()--></a><a name="Tomcat_7.0.32_(markt)"><strong>Tomcat 7.0.32 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>2012-10-09</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.32 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.32_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Revert multiple operation support for the <code>JMXProxyServlet</code>

+        pending further discussion. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        CVE-2012-4431: Fix bypass of <code>CsrfPreventionFilter</code> when

+        there is no session. Improve session management in the filter.

+        (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.32 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.32_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the couple of broken links in the Tomcat Javadoc. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.32 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.32_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update optional Checkstyle library to 5.6. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.31 (markt)"><!--()--></a><a name="Tomcat_7.0.31_(markt)"><strong>Tomcat 7.0.31 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.31 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.31_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add one library from JDK 7 to the value of <code>jarsToSkip</code>

+        property in the <code>catalina.properties</code> file. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52777">52777</a>: Add an option to automatically remove old, unused

+        versions (ones where there are no longer any active sessions) of

+        applications deployed using parallel deployment. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53828">53828</a>: Use correct status code when closing a WebSocket

+        connection normally in response to a close frame from a client. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <code>JMXProxyServlet</code> now allows multiple operation commands like

+        <code>invokeAndSet</code>, <code>invokeAndGet</code>,

+        etc. (schultz) <em>Note</em>: reverted in 7.0.32.

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53843">53843</a>: <code>request.isAsyncStarted()</code> must continue to

+        return true until the dispatch actually happens (which at the earliest

+        isn't until the thread where <code>startAsync()</code> was called

+        returns to the container). (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53863">53863</a>: Ensure the the implicit servlets (JSP and default) are

+        marked as override-able when using embedded mode. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When the <code>DefaultServlet</code> is under heavy load, the HTTP

+        header parser added to address <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52811">52811</a> generates large amounts

+        of garbage and uses significant CPU time. A cache has been added that

+        significantly reduces the overhead of this parser. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53854">53854</a>: Make directory listings work correctly when aliases

+        are used. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.31 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.31_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53713">53713</a>: Performance improvement of up to four times faster

+        parsing of JSP pages. Patch provided by Sheldon Shao. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.31 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.31_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make the cluster members and the cluster deployer associated with the

+        cluster accessible via JMX. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix a behavior of TcpPingInterceptor#useThread. If set to false, ping

+        thread is never started. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.31 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.31_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve the documentation web application to clarify the difference

+        between the tag and version parameters when using text interface of the

+        Manager web application. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make sessions saved in the <code>Store</code> associated with a

+        <code>Manager</code> that extends <code>PersistentManager</code>

+        optionally visible (via the showProxySessions Servlet initialisation

+        parameter in web.xml) to the Manager web application. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)"><!--()--></a><a name="Tomcat_7.0.30_(markt)"><strong>Tomcat 7.0.30 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-09-06</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Automatically delete temporary files used by Servlet 3.0 file

+        upload (for parts which size is greater than

+        <code>file-size-threshold</code> option in web.xml)

+        when request processing completes. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53071">53071</a>: This additional fix for this issue improves the

+        formatting of Jasper errors (or any exceptions that use a multi-line

+        message) with the <code>ErrorReportValve</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53469">53469</a>: If a URL passed to

+        <code>javax.servlet.http.HttpServletResponse.encodeURL()</code> cannot

+        be made absolute, never encode it and return it unchanged. Previously,

+        the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53062">53062</a> meant than an

+        <code>IllegalArgumentException</code> was thrown. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53481">53481</a>: Added support for SSLHonorCipherOrder to allow

+        the server to impose its cipher order on the client. Based on a patch

+        provided by Marcel &#352;ebek. This feature requires

+        Tomcat Native 1.1.25 or later. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53498">53498</a>: Fix atomicity bugs in use of concurrent collections.

+        Based on a patch by Yu Lin. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression in the previous fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53062">53062</a> that did

+        not always correctly normalize redirect URLs when the redirect URL

+        included a query string or fragment component. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add missing getter and setter for <code>roleSearchAsUser</code> option

+        on JNDI Realm. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add some HTTP status codes registered at IANA. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53531">53531</a>: Fix ExpandWar.expand to check the return value of

+        File.mkdir and File.mkdirs. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53535">53535</a>: Reduce memory footprint when performing class scanning

+        on Context start. Patch provided by Cedomir Igaly. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53541">53541</a>: Fix JAR scanning when WEB-INF/lib is provided via

+        VirtualDirContext. Patch provided by Philip Zuev. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53574">53574</a>: Ensure Servlets defined using jsp-file are available

+        when metadata-complete is true. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53584">53584</a>: Ignore path parameters when comparing URIs for FORM

+        authentication. This prevents users being prompted twice for passwords

+        when logging in when session IDs are being encoded as path parameters.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53623">53623</a>: When performing a asynchronous dispatch after series

+        of forwards, ensure that the request properties are correct for the

+        request at each stage. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53624">53624</a>: Ensure that

+        <code>HttpServletResponse.sendRedirect()</code> works when called after

+        a dispatch from an <code>AsyncContext</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53641">53641</a>: Correct name of HTTP header used in WebSocket

+        handshake for listing the preferred protocols. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Document the constants that were added to the

+        <code>RequestDispatcher</code> interface in Servlet 3.0. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure custom error pages are not truncated if the page that triggered

+        the error set a content length header. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53677">53677</a>: Ensure that a 500 response rather than no response is

+        returned if the HTTP headers exceed the size limit. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53702">53702</a>: When merging web.xml fragments, allow for

+        <code>&lt;jsp-property-group&gt;</code> elements having multiple

+        <code>&lt;url-pattern&gt;</code> elements. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Always make the resulting web.xml available even if metadata-complete is

+        true. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53714">53714</a>: Provide separate system properties to control which

+        JARs are excluded from which scans when using the JarScanner. This

+        allows JARs to be excluded from all scans or only from TLD scanning

+        and/or Servlet 3.0 pluggability scanning. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add several JDK libraries to the value of <code>jarsToSkip</code>

+        property in the <code>catalina.properties</code> file. (markt, kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix typos etc. in the code that logs merged web.xml (as enabled by

+        <code>logEffectiveWebXml</code> option on Context). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53758">53758</a>: When adding filters via

+        <code>FilterRegistration.Dynamic</code> the filters were added at the

+        wrong point because the <code>isMatchAfter </code> logic was inverted.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53783">53783</a>: Correctly handle JARs generated by tools that do not

+        create specific entries for directories. Patch provided by Violeta

+        Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improvements to DIGEST authenticator including the disabling caching of

+        authenticated user in session by default, tracking server rather than

+        client nonces and better handling of stale nonce values. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve performance of DIGEST authenticator for concurrent requests.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        CVE-2012-3546: Fix bypass of security constraint checks with FORM

+        authentication. Remove unneeded processing in <code>RealmBase</code>.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53800">53800</a>: <code>FileDirContext.list()</code> did not provide

+        correct paths for subdirectories. Patch provided by Kevin Wooten.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53801">53801</a>: Overlapping URL patterns were sometimes merged

+        incorrectly in security constraints leading to incorrect 401 responses.

+        Note: it was possible for access to be denied when it should have been

+        granted but it was not possible for access to be granted when it should

+        have been denied. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove the <code>socket.soTrafficClass</code> from the BIO and NIO

+        HTTP and AJP connectors because any use of the option is either ignored

+        or in some cases (Java 7 with NIO) throws an Exception. (mark)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent possible NPE when processing Comet requests during Connector

+        shutdown. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=42181">42181</a>: Better handling of edge conditions in chunk header

+        processing. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53697">53697</a>: Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51881">51881</a>

+        that mean that in some circumstances the <code>comet</code> flag was not

+        reset on <code>HttpAprProcessor</code> instances. This caused problems

+        when the Processor was re-used for a new connection that would trigger a

+        <code>NullPointerException</code> and could result in a JVM crash.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53725">53725</a>: Fix possible corruption of GZIP'd output.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Better parsing of line-terminators for requests using chunked encoding.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Further improvements to handling of Comet END events when the connector

+        is stopped. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53545">53545</a>: Ensure buffered data is cleared when using a

+        jsp:forward action inside a classic custom tag. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53654">53654</a>: Support <code>file://</code> URLs for JSP

+        dependencies. Patch provided by Viola Lu. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53792">53792</a>: Support <code>MethodExpression</code>s that include a

+        method invocation that is not at the end of the expression. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix an issue when running under Java 7 which throws exceptions when

+        trying to set an invalid option whereas Java 6 silently swallowed them.

+        The option using the problem was <code>soTrafficClass</code>.

+        Investigations showed that this option had no effect for Cluster Channel

+        Receivers so it was removed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53513">53513</a>: Fix race condition between the processing of session

+        sync message and transfer complete message. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update JSTL version information in the JNDI section of the documentation

+        web application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53524">53524</a>: Correct a typo in the cluster how-to section of the

+        documentation web application. Also fix a handful of spelling errors.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53601">53601</a>: Clarify in documentation that building Apache Tomcat 7

+        from sources requires a Java 6 JDK. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53653">53653</a>: Allow for wrapped source code example in

+        config/context.html. Patch provided by Terence Bandoian. (schultz)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53793">53793</a>: Change links on the list of applications in the

+        Manager to point to '/appname/' instead of '/appname'. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Tribes"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Tribes"><strong>Tribes</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid potential NPE identified by Find Bugs in

+        <code>org.apache.catalina.tribes.io.ReplicationStream</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53606">53606</a>: Fix potential NPE in <code>TcpPingInterceptor</code>.

+        Based on a patch by F. Arnoud. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53607">53607</a>: To avoid NPE, set TCP PING data to ChannelMessage.

+        Patch provided by F.Arnoud (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.30 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.30_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53701">53701</a>: Javadoc fixes. Patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Remove some unused code from Tomcat's package renamed, cut-down

+        copy of Commons BCEL used for annotation scanning. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53735">53735</a>: Add support for Java 7 byte code to Tomcat's

+        package renamed, cut-down copy of Commons BCEL used for annotation

+        scanning. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)"><!--()--></a><a name="Tomcat_7.0.29_(markt)"><strong>Tomcat 7.0.29 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-07-08</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.29_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for searching for roles in JNDI/LDAP

+        using another value than the actual DN or username specified.

+        Rather it will use a value from the users directory entry.

+        The new attribute introduced to the JNDIRealm is userRoleAttribute

+        (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix checking of recommended tcnative library version when using the APR

+        connector. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50306">50306</a>: Improve StuckThreadDetectionValve: add

+        stuckThreadNames property as a pair for the stuckThreadIds one,

+        add thread ids to the log messages. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52135">52135</a>: Add support for a default error page to be defined in

+        web.xml by defining an error page with just a nested location element.

+        It appears this feature was intended to be included in the Servlet 3.0

+        specification but was accidently left out. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53450">53450</a>: Correct regression in fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52999">52999</a> that

+        could easily trigger a deadlock when deploying a ROOT web application.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        As per section 1.6.2 of the Servlet 3.0 specification and clarification

+        from the Servlet Expert Group, the servlet specification version

+        declared in web.xml no longer controls if Tomcat scans for annotations.

+        Annotation scanning is now always performed - regardless of the version

+        declared in web.xml - unless metadata complete is set to true. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53619">53619</a>: As per clarification from the Servlet Expert Group,

+        JARs will always be scanned for ServletContainerInitializers regardless

+        of the setting of metadata complete. However, if an absolute ordering is

+        specified and a JAR is excluded from that ordering it will not be

+        scanned for ServletContainerInitializers nor will it be scanned for

+        matches to any HandleTypes annotations. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53465">53465</a>: Populate mapped-name property for resources defined in

+        web.xml. Based on a patch by Violeta Georgieva. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make the request available when establishing a WebSocket connection.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53467">53467</a>: Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53257">53257</a>

+        that introduced problems for JSPs that used characters that must be

+        encoded if used in a URI. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.29_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53430">53430</a>: Avoid a JVM crash when a connector that requires the

+        APR/native library is explicitly specified and the library, or a recent 

+        enough  version of it, is not available. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.29_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53421">53421</a>: Provide a more helpful error message if a getter or

+        setter cannot be found for a bean property when using expression

+        language. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+       <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53460">53460</a>: Allow container to handle errors if the creation of the

+       PageContext fails rather than swallowing the error. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.29_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update the WebSocket examples in the examples web application so that

+        they work with secure connections (wss) as well as non-secure (ws)

+        connections. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53456">53456</a>: Minor corrections and improvements to the HTTP

+        connector configuration reference. Patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53459">53459</a>: Correction and clarifications to the SSL Connector

+        configuration examples in the SSL how-to. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53464">53464</a>: Correct reference to sample init.d script for use with

+        jsvc in the documentation web application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53473">53473</a>: Correct the allowed values for the SSI option

+        <code>isVirtualWebappRelative</code> which are <code>true</code> or

+        <code>false</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Document <code>roleNested</code> property of <code>JNDIRealm</code>

+        in Configuration Reference. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+    <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.29_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53445">53445</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1354173">r1354173</a>):

+        Allow configurable name for SlowQueryReportJmx (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53416">53416</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1354641">r1354641</a>):

+        Multiple pools with the same name should register under JMX (fhanik)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.29 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.29_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix cleanup of temporary files in <code>TestNamingContext</code> test.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove a few files from the source distribution that are not required

+        since they are copied / generated during the build. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add manifest files to the set of files for which the line-ending is

+        changed to match the OS defaults in the source distributions. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Align Jk Ant tasks definitions between antlib.xml and catalina.tasks

+        files, introducing <code>jkupdate</code> as synonym for

+        <code>jkstatus</code>. The latter one is deprecated.

+        Simplify <code>bin/catalina-tasks.xml</code>, replacing

+        <code>taskdef</code> with <code>typedef</code> and adding Ant condition

+        implementations used with JMX to <code>jmxaccessor.tasks</code> file.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53454">53454</a>: Return correct content-length header for HEAD requests

+        when content length is greater than 2GB. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)"><!--()--></a><a name="Tomcat_7.0.28_(markt)"><strong>Tomcat 7.0.28 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-06-19</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.28_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a>: An additional fix to ensure that the

+        ChunkedInputFilter is correctly recycled. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52954">52954</a>: Make DIGEST authentication tolerant of clients (mainly

+        older Android implementations) that do not follow RFC 2617 exactly.

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52955">52955</a>: Implement custom thread factory for container

+        start-stop thread pool. It allows to use daemon threads and give

+        them more distinct names. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52999">52999</a>: Remove synchronization bottleneck from the firing of

+        <code>Container</code> events. (markt)  

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53008">53008</a>: Additional test cases for BASIC authentication and

+        RFC2617 compliance. Patch provided by Brian Burch. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53021">53021</a>: Correct WebSocket protocol version detection. (pero)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add new attributes of <code>allow</code> and <code>deny</code> to

+        UserConfig. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53024">53024</a>: Fix context reloading so requests received during the

+        reload are paused and processed when reloading completes rather than

+        receiving 404 responses. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve the handling of watched resources so that changes trigger a

+        reload rather than a stop followed by a start which allows requests

+        received to be paused and processed when reloading completes rather than

+        receiving 404 responses. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove potential bottleneck on creation of new WebSocket connections.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53047">53047</a>: If a JDBC Realm or DataSource Realm is configured for

+        an all roles mode that only requires authorization (and no roles) and no

+        role table or column is defined, don't populate the Principal's roles.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53056">53056</a>: Add APR version number to tcnative version INFO log

+        message. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53057">53057</a>: Add OpenSSL version number INFO log message when

+        initializing. (schultz)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Save a bit of memory in annotations cache in

+        <code>DefaultInstanceManager</code> by trimming annotation lists

+        to their size. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly configure the parser used to process server.xml so that

+        external entities may be used to include the content of external files

+        into server.xml. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make sure ContextMBean#findFilterDefs returns correct filter

+        definitions. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Ensure that <code>maxParameterCount</code> applies to multi-part

+        requests handled via the Servlet 3 file upload API. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53062">53062</a>: When constructing absolute URLs for redirects from

+        relative URLs ensure that the resulting URLs are normalized. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53067">53067</a>: Ensure the WebSocket Servlet continues to work when

+        requests are wrapped. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Enable host's xmlBase attribute in ContextConfig. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53071">53071</a>: Use the message from the throwable (if there is one)

+        when generating the report in the <code>ErrorReportValve</code> and no

+        message has been specified via <code>sendError()</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53074">53074</a>: Switch to an infinite socket timeout by default for

+        WebSocket connections. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53081">53081</a>: Do not always cache resources loaded by the web

+        application class loader since they may be very large which in turn

+        could trigger a memory leak. Calls to the web application class

+        loader's <code>getResourceAsStream()</code> method will now access

+        the resource directly rather than via the cache in most cases. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53090">53090</a>: Include superclasses when considering injection

+        targets. Patch provided by Borislav Kapukaranov. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53161">53161</a>: Provide a better error message if a

+        <code>ClassFormatException</code> occurs during annotation scanning and

+        do not prevent the web application from starting in this case. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53180">53180</a>: Improve check for setter method when processing

+        annotations. Patch provided by Violeta Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53225">53225</a>: Fix an IllegalStateException due to the JAR file being

+        closed when accessing static resources in a JAR file when

+        <code>urlCacheProtection="false"</code> in the

+        <code>JreMemoryLeakPreventionListener</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53230">53230</a>: Changed ManagerBase to throw

+        TooManyActiveSessionsException instead of IllegalStateException

+        when the maximum number of sessions has been exceeded and a new

+        session will not be created. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53257">53257</a>: Ensure that resources, including JSP files, that have

+        names that include characters with special meanings in URLs (such as

+        ampersand, semicolon, plus, hash and percent) are correctly handled.

+        This bug is partially a regression caused by the original fix for

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51584">51584</a> and partially an existing issue that had not previously

+        been identified. This fix reverts the original fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51584">51584</a>,

+        correctly fixes that issue and fixes the additional issues identified by

+        the test cases that were also added as part of this fix.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53266">53266</a>: If a class specified in a <code>@HandlesTypes</code>

+        annotation on a <code>ServletContainerInitializer</code> is missing

+        log a more helpful message and do not prevent the web application from

+        starting. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53267">53267</a>: Ensure that using the GC Daemon Protection feature of

+        the <code>JreMemoryLeakPreventionListener</code> does not trigger a

+        full GC every hour. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53285">53285</a>: Do not require <code>security-role-ref</code> elements

+        to contain a <code>role-link</code> element. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53301">53301</a>: Prevent double initialization of pre-created Servlet

+        instances when used in embedded mode. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53322">53322</a>: When processing resource injection, correctly infer

+        property name from its setter method if the name starts with several

+        uppercase characters. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53333">53333</a>: When processing JNDI resources, take account of the

+        types of any specified injection targets to ensure that the resource

+        definition and the injection target types are consistent. Based on a

+        patch provided by Violeta Georgieva. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53337">53337</a>: Forwarding via a <code>RequestDispatcher</code> to an

+        asynchronous Servlet always failed. Includes a test case based on code

+        by Rossen Stoyanchev. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53339">53339</a>: Ensure WebSocket call backs (<code>onOpen</code> etc.)

+        are called using the web application's class loader. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53342">53342</a>: To avoid BindException, make startStopThreads into a

+        demon thread. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53353">53353</a>: Make the internal HTTP header parser more tolerant of

+        Content-Type values that contain invalid parameters by ignoring the

+        invalid parameters. It is a followup to bug <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52811">52811</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53354">53354</a>: Correctly handle <code>@WebFilter</code> annotations

+        that do not include a mapping. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53356">53356</a>: Add support for servlets mapped explicitly to the

+        context root of a web application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53366">53366</a>: Ensure new HTTP header parser works correctly when

+        running Tomcat under a security manager. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53368">53368</a>: Configure the default security policy to allow web

+        applications to use WebSocket when running under a security manager.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53373">53373</a>: Allow whitespace around delimiters in &lt;Context&gt;

+        aliases for readability. (schultz)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.28_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52858">52858</a>, CVE-2012-4534: Correct fix for high CPU load.

+        (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53138">53138</a>: Broken Sendfile on SSL introduced in 7.0.27

+        (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a>: Additional fix required to ensure that

+        <code>InputFilter</code>s are recycled between requests. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53061">53061</a>: Fix a problem in the NIO connector whereby if the

+        poller was under low but consistent load (&gt;1 request/per second and

+        always less than 1 second between requests) timeouts never took place.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53063">53063</a>: When using an Executor with BIO, use the

+        executor's maxThreads as the default for maxConnections. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53119">53119</a>: Prevent buffer overflow errors being reported when a

+        client disconnects before the response has been fully written from an

+        AJP connection using the APR/native connector. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53169">53169</a>: Allow developers to avoid chunked encoding for a

+        response of unknown length by setting the <code>Connection: close</code>

+        header. Based on a patch suggested by Philippe Marschall. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53173">53173</a>: Properly count down maxConnections (fhanik)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update default value of pollerThreadCount for the NIO connector.

+        The new default value will never go above 2 regardless of 

+        available processors. (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Allow to retrieve the current <code>connectionCount</code>

+        via getter from the endpoint and as JMX attribute of the ThreadPool

+        mbean. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct an edge case where Comet END events were not send to connected

+        clients when the Tomcat connector was stopped. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53406">53406</a>: Fix possible stack overflow on connection close when

+        using Comet. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve <code>InternalNioInputBuffer.parseHeaders()</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Implement <code>maxHeaderCount</code> attribute on Connector.

+        It is equivalent of LimitRequestFields directive of

+        <a href="http://httpd.apache.org/">Apache HTTPD</a>.

+        Default value is 100. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.28_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48097#c7">48097#c7</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53366#c1">53366#c1</a>: If JSP page unexpectedly

+        fails to initialize PageContext instance, write exception to the logs

+        instead of silent swallowing. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53032">53032</a>: Modify <code>JspC</code> so it extends

+        <code>org.apache.tools.ant.Task</code> enabling it to work with features

+        such as namespaces within build.xml files. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.28_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid NPE when reload if a state of a BackupManager is FAILED. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53087">53087</a>: In order to avoid that a backup node expire a session,

+        replicate session access time in BackupManager. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for SecureRandom to cluster manager template. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.28_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove obsolete bug warning from Windows service

+        documentation page. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50182">50182</a>: Various improvements to the Compression Filter. Patch

+        provided by David Becker. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52853">52853</a>: Clarify how Jar Scanner handles directories. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53158">53158</a>: Fix documented defaults for DBCP.

+        Patch provided by ph.dezanneau at gmail.com. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53203">53203</a>: Correct documentation for the default value

+        of <code>connectionTimeout</code> attribute for AJP protocol

+        connectors. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53289">53289</a>: Clarify <code>ResourceLink</code> example that

+        uses DataSource.getConnection(username, password) method. Not all

+        data source implementations support it. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix several HTML markup errors in servlets of examples web application.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53398">53398</a>: Correct spelling of "received" in the

+        Manager application's XML output. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53403">53403</a>: Update a reference to the Servlet specification in the

+        first web applciation section of the documentation web application to

+        include newer versions of the specificarion. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.28_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50864">50864</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1311844">r1311844</a>):

+        JMX enable most pool properties (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53254">53254</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1340160">r1340160</a>):

+        Add in the ability to purge connections from the pool (fhanik)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53367">53367</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1346691">r1346691</a>):

+        Prevent pool from hanging during database failure (fhanik)

+      </td></tr>  

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+         When a connection is reconnected due to failed validation

+         make sure the ConnectionState is reset or it will assume

+         incorrect values (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53374">53374</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1348056">r1348056</a>):

+        Add support for the following properties in DataSourceFactory:

+        <code>commitOnReturn</code>, <code>rollbackOnReturn</code>,

+        <code>useDisposableConnectionFacade</code>,

+        <code>logValidationErrors</code> and

+        <code>propagateInterruptState</code>.

+        Based on patch proposed by Suresh Avadhanula. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.28 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.28_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Eclipse JDT Compiler 3.7.2 at maven tomcat-jasper.pom. (pero)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the native component of the Tomcat APR/native connector to

+        1.1.24. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add missing dependencies in pom files. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53034">53034</a>: Add <code>project.url</code> and

+        <code>project.licenses</code> sections to the POMs for the Maven

+        artifacts. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Properly mention <code>jsp_2_2.xsd</code> in the main LICENSE and

+        INSTALLLICENSE files. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53115">53115</a>: Fix using the command "<code>catalina.bat run</code>"

+        when the value of <code>%TEMP%</code> contains spaces. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add dependencies and description to "validate" target in

+        <code>build.xml</code>, so that it could be run separately.

+        Improve <code>BUILDING.txt</code> and <code>RUNNING.txt</code>.

+        (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)"><!--()--></a><a name="Tomcat_7.0.27_(markt)"><strong>Tomcat 7.0.27 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-04-05</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.27_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Explicitly ignore empty path values in <code>virtualClasspath</code>

+        attribute of <code>VirtualWebappLoader</code> class. Document that

+        whitespace around the values is trimmed. Reformat documentation

+        examples to make them more readable. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Further improve fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51197">51197</a> to allow an error reporting

+        Valve to write a response body if <code>sendError()</code> is called

+        during an asynchronous request on a container thread. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51741">51741</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1307600">r1307600</a>):

+        If <code>VirtualDirContext</code> class is configured with non-empty

+        value of <code>extraResourcePaths</code> option (a feature added

+        in 7.0.24), do not implicitly set <code>allowLinking</code> option to

+        the value of <code>true</code>. If it is really needed, it should be

+        set explicitly. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52500">52500</a>: Added configurable mechanism to retrieve user names

+        from X509 client certificates. Based on a patch provided by

+        Michael Furman. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52719">52719</a>: Fix a theoretical resource leak in the JAR validation

+        that checks for non-permitted classes in web application JARs. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Code clean-up identified by <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52723">52723</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52724">52724</a>,

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52726">52726</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52727">52727</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52729">52729</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52731">52731</a>

+        and <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52732">52732</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52792">52792</a>: Improve error message when a JNDI resource can not be

+        found. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52811">52811</a>: Fix parsing of Content-Type header in

+        <code>HttpServletResponse.setContentType()</code>. Introduces

+        a new HTTP header parser that follows RFC2616. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52830">52830</a>: Correct JNDI lookups when using

+        <code>javax.naming.Name</code> to identify the resource rather than a

+        <code>java.lang.String</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52833">52833</a>: Handle the case where the parent class loader for the

+        Catalina object does not have the system class loader in its hierarchy.

+        This may happen when embedding. Patch provided by olamy. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52839">52839</a>: Add a unit test for DigestAuthenticator and

+        SingleSignOn. Patch provide by Brian Burch. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52846">52846</a>: Make sure NonLoginAuthenticator registers not 

+        MemoryUser but GenericPrincipal into a session when UserDatabaseRealm 

+        is used. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52850">52850</a>: Extend memory leak prevention and detection code to

+        work with IBM as well as Oracle JVMs. Extend unit tests to check direct

+        and indirect ThreadLocal memory leak detection. Based on a patch

+        provided by Rohit Kelapure. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for the WebSocket protocol (RFC6455). Both streaming and

+        message based APIs are provided and the implementation currently fully

+        passes the Autobahn test suite. Also included are several examples.

+        A significant contribution to this new functionality was provided by

+        Johno Crawford &mdash; particularly the examples. Contributions were

+        also provided by Petr Praus, Jonathan Drake &amp; Sl&aacute;vka. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When stopping a Context, ensure that any Servlets registered with JMX

+        are unregistered. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Make the implementation of <code>Catalina.getParentClassLoader</code>

+        consistent with similar methods across the code base and have it return

+        the system class loader if no parent class loader is set. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52953">52953</a>: Ensure users can authenticate when using DIGEST

+        authentication with digested passwords if the digested password is

+        stored using upper case hexadecimal characters since DIGEST

+        authentication expects digests to use lower case characters. Based on a

+        patch provided by Neale Rudd. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52957">52957</a>: Ensure that a Valve implements Lifecycle before

+        calling any Lifecycle methods on that Valve. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52958">52958</a>: Fix MBean descriptors for

+        <code>org.apache.catalina.realm</code> package. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52974">52974</a>: Fix <code>NameNotFoundException</code> when

+        field/method is annotated with <code>@Resource</code> annotation. Patch

+        provided by Violet Agg. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for multi-thread deployment in UserConfig. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.27_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly register NIO sockets with poller after processing Comet events

+        to ensure that no read events are missed. This fixes an intermittent

+        issue observed in the unit tests. (fhanik/markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52770">52770</a>: Fix a bug in the highly unlikely circumstance that

+        an infinite timeout was specified for writing data to a client when

+        using NIO. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52858">52858</a>: Fix high CPU load with SSL, NIO and sendfile when

+        client breaks the connection before reading all the requested data.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52926">52926</a>: Avoid NPE when an NIO Comet connection times out on

+        one thread at the same time as it is closed on another thread. (markt)  

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Include port number when known in connector name when logging messages

+        from connectors that use automatic free port allocation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't try an unlock the acceptor thread if it is not locked. This is

+        unlikely to impact normal usage but it does fix some unit test issues.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When using the APR connector ensure that any connections in a keep-alive

+        state are closed when the connector is stopped rather than when the

+        connector is destroyed. This is important when stop() followed by

+        start() is called on the connector. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.27_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52725">52725</a>: Use configurable package name for tags rather than

+        hard-coded value so configuration actually works. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52758">52758</a>: Implement additional interface methods in Eclipse JDT

+        integration required for Jasper to correctly with the latest Eclipse

+        development code. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52772">52772</a>: Ensure uriRoot is fully validated before it is used.

+        Patch based on a suggestion by Eugene Chung. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52776">52776</a>: Refactor the code so JspFragment.invoke cleans up

+        after itself. Patch provided by Karl von Randow. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52970">52970</a>: Take account of coercion rules when invoking methods

+        via EL. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52998">52998</a>: Partial fix. Remove static references to the EL

+        expression factory and use per web application references instead.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52998">52998</a>: Remainder of fix. Cache the class to use for the EL

+        expression factory per class loader. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=53001">53001</a>: Revert the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46915">46915</a> since the use case

+        described in the bug is invalid since it breaks the EL specification.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.27_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Replicate principal in ClusterSingleSignOn. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.27_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52760">52760</a>: Fix expires filter mime type in javascript examples.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52842">52842</a>: Exception in MBeanDumper when dumping MBean for

+        StandardThreadExecutor. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Bring built-in mime types for embedded Tomcat more in line with the

+        ones defined in the default web.xml configuration file. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support to the JMXProxyServlet which is part of the Manager

+        application for fetching a specific key from a

+        <code>CompositeData</code> value. Updated documentation, so that

+        the entire 'get' command for the JMX proxy servlet is documented,

+        including the new optional 'key' parameter. (schultz/markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.27_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Pool cleaner thread should be created using the classloader

+        that loaded the pool, not the context loader (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52804">52804</a>: Make pool properties serializable and cloneable.

+        (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51237">51237</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1302902">r1302902</a>):

+        Slow Query Report should log using WARN level when queries are slow

+        and within the threshold of caching it. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52002">52002</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1302948">r1302948</a>):

+        Add in configuration option to disallow connection reuse. 

+        (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1305862">r1305862</a>):

+        useDisposableConnectionFacade is by default enabled (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52493">52493</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1302969">r1302969</a>):

+        Java 7 DataSource method addition. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51893">51893</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1302990">r1302990</a>):

+        Throw an error and notification when pool is exhausted. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50860">50860</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1303031">r1303031</a>):

+        Add in option to configure logging for validation errors. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52066">52066</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1305931">r1305931</a>):

+        Add in configuration option, progagateInterruptState, to allow threads to 

+        retain the interrupt state. (fhanik)

+      </td></tr>  

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.27 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.27_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52750">52750</a>: Fix the way how daemon.sh parses command options so

+        that more then one can be provided. (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Rearrange <code>validate-eoln</code> target in <code>build.xml</code>

+        so that it could be run ahead of compilation. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Apache Commons Daemon to 1.0.10. (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the native component of the Tomcat APR/native connector to

+        1.1.23 and take advantage of the simplified distribution. (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Eclipse JDT Compiler 3.7.2. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)"><!--()--></a><a name="Tomcat_7.0.26_(markt)"><strong>Tomcat 7.0.26 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-02-21</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.26_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Provide constants for commonly used <code>Charset</code> objects and use

+        these constants where appropriate. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Refactor the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52184">52184</a> to correct two issues (a missing

+        class and incorrect class/method names) when using the extras logging

+        packages. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52444">52444</a>: Only load classes during HandlesTypes processing if

+        the class is a match. Previously, every class in the web application was

+        loaded regardless of whether it was a match or not. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52488">52488</a>: Correct typo: exipre -&gt; expire. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add a unit test for SSO authentication. Patch provided by Brian Burch.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52511">52511</a>: Correct regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51741">51741</a>

+        that caused a harmless exception to be logged when scanning for

+        annotations and <code>WEB-INF/classes</code> did not exist. (markt) 

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Refactor to remove a circular dependency between

+        <code>org.apache.catalina</code> and <code>org.apache.naming</code>.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Remove some initialisation code from the standard start process (i.e.

+        via the scripts) that was intended for embedding but is not required

+        when performing a standard start.(markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add new method to <code>MBeanFactory</code> that allows any Valve to be

+        created and deprecate the methods to create specific Valves. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Partial sync of MIME type mapping with mime.types from the Apache web

+        server. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52577">52577</a>: Fix a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52328">52328</a>.

+        Prevent output truncation when <code>reset()</code> is called on a

+        response. (mark)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52586">52586</a>: Remove an old and now unnecessary hack that modified

+        the path info reported via the

+        <code>javax.servlet.forward.path_info</code> request attribute when

+        forwarding to an error page. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52587">52587</a>: Ensure that if it is necessary to fall back to the

+        default NullRealm, the NullRealm instance is created early enough for it

+        to be correctly initialised. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix millisecond output in AccessLogValve when using a

+        SimpleDateFormat based time pattern. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52591">52591</a>: When dumping MBean data, skip attributes where getters

+        throw <code>UnsupportedOperationException</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52607">52607</a>: Ensure that the extension validator checks the JARs in

+        the shared and common class loaders for extensions. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a threading issue in the generation of the list of standard

+        authenticators during Context initialization that could lead to a web

+        application failing to start if Contexts were started in parallel.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52669">52669</a>: Correct regression that broke annotation processing in

+        <code>/WEB-INF/classes</code> for web applications deployed as WARs,

+        packageless classes and some embedding scenarios. The regression was

+        introduced by the invalid assumptions made in the fix for

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51741">51741</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52671">52671</a>: When dumping MBean data, skip attributes where getters

+        throw <code>NullPointerException</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.26_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51543">51543</a>: Provide a meaningful error message when writing more

+        response headers than permitted. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52547">52547</a>: Ensure that bytes written (which is used by the access

+        log) is correctly reset after an HTTP 1.0 request has been processed.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Minor refactoring to reduce code duplication in the HTTP connectors.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52606">52606</a>: Ensure that POST bodies are available for reply after

+        FORM authentication when using the AJP connectors. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.26_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52474">52474</a>: Ensure that leading and trailing white space is

+        removed from listener class names when parsing TLD files. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52480">52480</a>: When converting class path entries from URLs to

+        files/directories, ensure that any URL encoded characters are converted.

+        Fixes JSP compilation with javac when Tomcat is installed at a path that

+        includes spaces. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52666">52666</a>: Correct coercion order in EL when processing the

+        equality and inequality operators. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.26_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve <code>BUILDING.txt</code>. Update instructions for

+        building. Add instructions for using Checkstyle and running the

+        tests. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38216">38216</a>: Improve handling of <code>null</code> return values in

+        the JMX proxy servlet which is part of the Manager application.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52515">52515</a>: Make it clear in the Realm how-to in the documentation

+        web application that digested password storage when using DIGEST

+        authentication requires that MD5 digests are used. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52634">52634</a>: Fix typos in JSP examples. Patch provided by

+        Felix Schumacher. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52641">52641</a>: Remove mentioning of ldap.jar from docs.

+        Patch provided by Felix Schumacher. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.26_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix code style issues and enable Checkstyle checks for jdbc-pool when

+        it is built within Tomcat. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51582">51582</a> Correct set and reset the query cache to avoid NPE   (fhanik)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.26 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.26_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update Commons Daemon to 1.0.9 to resolve <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52548">52548</a> which meant

+        that services created with service.bat did not set the

+        <code>catalina.home</code> and <code>catalina.base</code> system

+        properties. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Implement check for correct end-of-line characters in the source

+        files. It is run as separate target in <code>build.xml</code>.

+        (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.25 (markt)"><!--()--></a><a name="Tomcat_7.0.25_(markt)"><strong>Tomcat 7.0.25 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-01-21</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.25 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.25_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Restore format of the first line of error message for JMX proxy

+        servlet in case scripts were depending on it. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.25 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.25_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When building a Windows installer do not copy whole "res" folder to

+        output/dist, but only the files that we need. Apply fixcrlf filter

+        only after the files are copied, so that <code>INSTALLLICENSE</code>

+        file had correct line ends. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove <code>res/License.rtf</code>. The file that is actually shown

+        by the Windows installer is <code>res/INSTALLLICENSE</code>.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Automate the OpenPGP signature generation for the release process.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't exclude directories named target from the build process.

+        (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)"><!--()--></a><a name="Tomcat_7.0.24_(markt)"><strong>Tomcat 7.0.24 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.24_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52184">52184</a>: Provide greater control over the logging of errors

+        triggered by invalid input data (i.e. data over which Tomcat has no

+        control). (markt/kkolinko) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52225">52225</a>: Fix ClassCastException in an Alias added to

+        existing host through JMX. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Do not throw IllegalArgumentException from parseParameters() call

+        when chunked POST request is too large, but treat it like an IO error.

+        The <code>FailedRequestFilter</code> filter can be used to detect this

+        condition. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52245">52245</a>: Don't allow web applications to package classes from

+        the <code>javax.el</code> package. Patch provided by pid. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52259">52259</a>: Fix regression caused by the addition of the threaded

+        component start (<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46264">46264</a>) that triggered a deadlock on startup

+        if no Realm was configured. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52293">52293</a>: Correctly handle the case when

+        <code>antiResourceLocking</code> is enabled at the Context level when

+        <code>unpackWARs</code> is disabled at the Host level. Based on a patch

+        by Justin Miller. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In <code>ExtendedAccessLogValve</code> when printing %-encoded value of

+        a parameter, use UTF-8 encoding to convert parameter value to bytes

+        instead of platform default encoding. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52303">52303</a>: Allow web applications that do not have a login

+        configuration to participate in a SSO session. Patch provided by Brian

+        Burch. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52316">52316</a>: When using sendfile, use the number of bytes requested

+        to be written to the response in the access log valve for bytes written

+        rather than recording a value of zero. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52326">52326</a>: Reduce log level for class loading errors during

+        <code>@HandlesTypes</code> processing to debug. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52328">52328</a>: Improve performance when large numbers of single

+        characters and/or small strings are written to the response via a

+        Writer. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52384">52384</a>: Do not fail with parameter parsing when debug logging

+        is enabled. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Do not flag extra '&amp;' characters in parameters as parse errors.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Reduce log level for the message about hitting

+        <code>maxParameterCount</code> limit from WARN to INFO. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52387">52387</a>: Ensure that the correct host is used when configuring

+        logging when Tomcat is embedded. Patch provided by David Calavera.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52405">52405</a>: Align the Servlet 3.0 implementation with the changes

+        defined in the first maintenance release (also know as Rev. A). See the

+        <a href="http://jcp.org/aboutJava/communityprocess/maintenance/jsr315/servlet3-mr-reva.html">JCP documentation</a> for a detailed list of changes

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve JMX names for objects related to Connectors that have the

+        address attribute set. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove some stale attributes from MBeans. (rjung)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+         Move destruction of <code>ContainerBase</code> objects to

+         <code>ContainerBase</code> to ensure that they are destroyed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52443">52443</a>: Change the behaviour of the default Realm in the

+        embedded use case so it is set once on the Engine rather than on every

+        Context thereby avoiding the Lifecycle issues with having the same Realm

+        set on multiple Contexts. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide a new Realm implementation, the NullRealm, that does not contain

+        any users and is used as the default Realm implementation (rather than

+        the JAAS Realm which was used prior to this change) if no Realm is

+        specified. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52461">52461</a>: Don't assume file based URLs when checking last

+        modified times for global and host level web.xml files. Patch provided

+        by violetagg. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add test cases for the BASIC and NonLogin Authenticators when not using

+        SSO. Patch provided by Brian Burch. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.24_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52028">52028</a>: Add support for automatic binding to a free port by a

+        connector if the special value of zero is used for the port. This is

+        mainly useful in embedded and testing scenarios. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove obsolete <code>emptySessionPath</code> JMX attribute. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct error in fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49683">49683</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that the process of unlocking the acceptor thread does not

+        trigger processing of the connection as if it were a valid request.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.24_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52450">52450</a>: Add setter for entityResolver in ParserUtils.

+        This is mainly useful when jasper and dtds are in different

+        class loaders. (mturk)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52321">52321</a>: Ensure that the order of multiple prelude/coda values

+        for JSP pages is respected. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52335">52335</a>: Only handle <code>&lt;\%</code> and not

+        <code>\%</code> as escaped in template text. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52440">52440</a>: Ensure that when using

+        <code>ValueExpression.getValueReference()</code> if the expression is an

+        EL variable that the value returned is the <code>ValueReference</code>

+        for the <code>ValueExpression</code> associated with the EL variable.

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52445">52445</a>: Don't assume that EL method expressions have

+        exactly three components (identifier, method name, paramaters). (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.24_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38216">38216</a>: Add the ability to invoke MBean operations to the JMX

+        proxy sevrlet in the Manager application. Based on a patch by

+        Christopher Hlubek. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Further clarify the relation between values used by

+        <code>RemoteIpValve</code> and <code>RemoteIpFilter</code>

+        and their use by <code>AccessLogValve</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52243">52243</a>: Improve windows service documentation to clarify how

+        to include <code>#</code> and/or <code>;</code> in the value of an

+        environment variable that is passed to the service. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52366">52366</a>: Fix typo in VirtualWebappLoader documentation

+        (configuration example). (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Replace Bugzilla search link on <code>ROOT/index.jsp</code> page with

+        one pointing to the bug reporting page of Tomcat site. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Move MBean dump code from JMXProxyServlet into a utility class. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/Tribes"><!--()--></a><a name="Tomcat_7.0.24_(markt)/Tribes"><strong>Tribes</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52208">52208</a>: Fix threading issue that may lead to harmless NPE

+        during shutdown that has occasionally been observed when running the

+        unit tests. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52213">52213</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52354">52354</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52355">52355</a> and

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52356">52356</a>: Fix some potential concurrency issues in

+        <code>FastQueue</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.24_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1207712">r1207712</a>: Pool cleaner should be a global thread, not spawn

+        one thread per connection pool. (fhanik)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.24 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.24_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Apache Commons Daemon to 1.0.8. (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Apache Commons Pool to 1.5.7. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix line ends in <code>.gitignore</code> files contained in source

+        distributions. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Run Mapper performance test twice if the first run took too long,

+        to ignore occasional failures. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Align <code>.gitignore</code> and <code>build.xml</code>

+        exclude patterns with <code>svn:ignore</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Configure <code>defaultexcludes</code> for Ant 1.8.1/1.8.2.

+        The <code>.git</code> and <code>.gitignore</code> patterns are

+        in since Ant 1.8.2, but we include <code>.gitignore</code> in

+        src distributions. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52237">52237</a>: Allow JUnit logs to be generated in formats other than

+        plain text. Patch provided by M Hasko. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix build condition for tomcat-dbcp to always rebuild whan a new version

+        of commons-pool or commons-dbcp is downloaded. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add example of configuration for <code>SetCharacterEncodingFilter</code>

+        to the default <code>web.xml</code> file. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Switch unit tests to bind Connectors to localhost rather than all

+        available IP addresses. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Eclipse JDT Compiler 3.7.1. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add Netbeans <code>nbproject</code> folder to <code>svn:ignore</code>

+        and <code>.gitignore</code>. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Align <code>.gitignore</code> with trunk. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)"><!--()--></a><a name="Tomcat_7.0.23_(markt)"><strong>Tomcat 7.0.23 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-11-25</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.23_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46264">46264</a>: Add the ability to start and stop containers

+        (primarily Contexts) using a thread pool rather than a single thread.

+        This can significantly improve start and stop time. Based on patches

+        by Joe Kislo and Felix Schumacher. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50570">50570</a>: Enable FIPS mode to be set in AprLifecycleListener.

+        Based upon a patch from Chris Beckey. (schultz/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51744">51744</a>: Throw the correct exception if an application attempts

+        to modify the associated JNDI context. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51744">51744</a>: Add an option to the StandardContext that allows

+        exception throwing when an application attempts to modify the associated

+        JNDI context to be disabled. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51910">51910</a>: Prevent NPE on connector stop if Comet applications

+        are being used without the CometConnectionManagerValve. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51940">51940</a>: Do not limit saving of request bodies during FORM

+        authentication to POST requests since any HTTP method may include a

+        request body. Based on a patch by Nicholas Sushkin. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51956">51956</a>: RemoteAddrFilter used getRemoteHost instead of

+        getRemoteAddr when filtering Comet events. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51952">51952</a>: Make the inclusion of a response body with a redirect

+        response introduced to address <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=41718">41718</a> optional and disabled by

+        default due to the side-effects of including a body with the response in

+        this case. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51972">51972</a>: Correctly handle protocol relative URLs when used with

+        <code>sendRedirect()</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Simplify the deployment code and use full paths in log messages to

+        remove any ambiguity in where a context is being deployed from. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52009">52009</a>: Fix a NPE during access log entry recording when an

+        error occurred during the processing of a Comet request. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In <code>OneLineFormatter</code> log formatter in JULI always use

+        the US locale to format the date (esp. the month names). (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Cache the results of parsing the global and host level web.xml files to

+        improve web application start time. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52042">52042</a>: Correct threading issue in annotation caching that

+        could lead to an NPE if multiple threads were processing the same class

+        hierarchy for annotations. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct additional threading and premature clearance issues with the

+        annotation cache. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49779">49779</a> that

+        parameters POSTed by an unauthenticated user to a page that required

+        FORM authentication were lost during the authentication process.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a>: Ensure that the input and output buffers are correctly

+        reset between keep-alive requests when using Servlet 3.0 asynchronous

+        request processing. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure changes to the configuration of the RemoteHostValve and the

+        RemoteAddrValve via JMX are thread-safe. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure the the memory leak protection for the HttpClient keep-alive

+        always operates even if the thread has already stopped. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Remove the Java 1.2 specific error handling around the adding of the

+        shutdown hook. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct errors in i18n resources and resource usage that meant some

+        messages were either not used or were incorrectly formatted. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Replace the use of deprecated auth method names from

+        <code>authenticator.Constants</code> with the auth method names from

+        <code>HttpServletRequest</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make configuration issues for security related Valves and Filters result

+        in the failure of the valve or filter rather than just a warning

+        message. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve performance of parameter processing for GET and POST requests.

+        Also add an option to limit the maximum number of parameters processed

+        per request. This defaults to 10000. Excessive parameters are ignored.

+        Note that <code>FailedRequestFilter</code> can be used to reject the

+        request if some parameters were ignored. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52091">52091</a>: Address performance issues related to lock contention

+        in StandardWrapper. Patch provided by Taiki Sugawara. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Switch to using Collections.enumeration() rather than custom code that

+        does the same thing. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52113">52113</a>: Don't assume presence of context.xml file with JMX

+        deployment. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        In <code>RequestFilterValve</code> (<code>RemoteAddrValve</code>,

+        <code>RemoteHostValve</code>): refactor value matching logic into

+        separate method and expose this new method <code>isAllowed</code>

+        through JMX. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52156">52156</a>: Ensure that

+        <code>getServletContext().getResource(path)</code> returns the correct

+        resource when path contains <code>/../</code> sequences or any other

+        sequences that require normalization. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Report existence of HTTP request parameter parsing errors via new

+        special ServletRequest attribute,

+        <code>org.apache.catalina.parameter_parse_failed</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        New filter <code>FailedRequestFilter</code> that will reject a request

+        if there were errors during HTTP parameter parsing. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve special attributes handling in Request object by using hash

+        table lookup instead of series of string comparisons. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Deprecate unused methods in <code>IntrospectionUtils</code> class.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve processing of errors that are wrapped in

+        <code>InvocationTargetException</code>. Rethrow fatal errors that must

+        be rethrown. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve handling of failed web application deployments during automatic

+        deployment. Once deployment of a web application fails in one form (e.g.

+        WAR), no further attempt (e.g. directory) will be made to deploy that

+        web application. The base Lifecycle implementation has been improved to

+        allow failed web applications to be started once the configuration

+        issues have been resolved. Any changes to a context.xml file (global,

+        per host or web application specific) will now result in a redeploy

+        of the affected web application(s) that ensures that any changes are

+        correctly applied rather than a reload which ignores changes in

+        context.xml files. (markt/kkolinko) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52173">52173</a>: Improve Javadoc for <code>delegate</code> attribute

+        of WebappClassLoader. Based on a patch by bmargulies. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add <code>denyStatus</code> attribute to <code>RequestFilterValve</code>

+        (<code>RemoteAddrValve</code>, <code>RemoteHostValve</code> valves) and

+        <code>RequestFilter</code> (<code>RemoteAddrFilter</code>,

+        <code>RemoteHostFilter</code> filters). It allows to use different

+        HTTP response code when rejecting denied request. E.g. 404 instead

+        of 403. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Slightly improve performance of UDecoder.convert(). Align

+        <code>%2f</code> handling between implementations. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.23_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51881">51881</a>: Correctly complete Comet requests when the Comet END

+        event is triggered asynchronously. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51905">51905</a>: Fix infinite loop in AprEndpoint shutdown if

+        acceptor unlock fails. Reduce timeout before forcefully closing

+        the socket from 30s to 10s. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51912">51912</a>: Fix HTTP header processing in NIO HTTP connector.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve MimeHeaders.toString(). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix threading issue in NIO connectors during shutdown that meant Comet

+        connections were not always shut down cleanly. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        In HTTP connectors: self-guard against using a non-recycled input

+        buffer. Requests will be rejected with response status 400. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52121">52121</a>: Fix possible output corruption when compression is

+        enabled for a connector and the response is flushed. Includes a test

+        case provided by David Marcks. (kkolinko/markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve multi-byte character handling in Coyote output for HTTP

+        and AJP. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Refactor acceptor unlock code to reduce waiting time during connector

+        pause and stop. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.23_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct possible (but very small) memory leak when using maxLoadedJsps

+        to limit the number of JSPs loaded at any one time. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52051">52051</a>: Better handling of missing resource problems with

+        non-standard Servlet mappings so that a 404 response is returned to the

+        client rather than a 500 response. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52091">52091</a>: Address performance issues related to log creation

+        in TagHandlerPool. Patch provided by Taiki Sugawara. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Switch to using Collections.enumeration() rather than custom code that

+        does the same thing. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.23_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid an unnecessary session ID change notice. 

+        Notice of changed session ID by JvmRouteBinderValve is unnecessary to 

+        BackupManager. In BackupManager, change of session ID is replicated by 

+        the call of a setId() method. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix duplicate <code>resetDeltaRequest()</code> call in

+        <code>DeltaSession.setId(String)</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Work around a <a href="http://bugs.sun.com/view_bug.do?bug_id=6427854">known JVM bug</a> that is fixed in 1.7.0_01 but still

+        present in 1.6.0_29 and was triggering intermittent unit test failure

+        for <code>org.apache.catalina.tribes.group.

+        TestGroupChannelMemberArrival.testMemberArrival</code>.

+        The bug affects any components that use NIO although it was more likely

+        to be observed in the clustering module than the HTTP or AJP NIO

+        connector. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        When Context manager does not exist, no context manager message is 

+        replied in order to avoid timeout (default 60sec) of 

+        GET_ALL_SESSIONS sync phase. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix setting maxInactiveInterval, sessionIdLength and

+        processExpiresFrequency for cluster managers. Use setter

+        when setting maxActiveSessions. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.23_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50923">50923</a>: Use distinct background color for <code>code</code>

+        tag in Tomcat documentation, for better readability. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51630">51630</a>: Fix bug in async0 example that triggered an

+        IllegalStateException in the application log. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52025">52025</a>: Add additional information regarding DriverManager,

+        the service provider mechanism and memory leaks. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52049">52049</a>: Improve setup instructions for running as a Windows

+        service: remove references to specific Windows operating systems - it

+        easily becomes dated; correct information on how a JRE is identified and

+        selected. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52172">52172</a>: Clarify Tomcat build instructions. Patch provided

+        by bmargulies. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.23_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52015">52015</a>: In jdbc-pool: JdbcInterceptor passes not 'this' but 

+        'proxy' to <code>getNext().invoke</code>. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In jdbc-pool: Improve handling of Errors that originate from methods

+        invoked through reflection. In <code>TrapException</code> interceptor:

+        rethrow Error as is, without wrapping it in a RuntimeException.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In jdbc-pool: Unwrap InvocationTargetException if it is caught in

+        <code>ResultSetProxy</code>, like we do it elsewhere. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When building jdbc-pool from within Tomcat, use Tomcat's

+        <code>output</code> directory location. This allows to move all build

+        output away from the source tree. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.23 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.23_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the package re-named copy of Commons BCEL (formerly Jakarta BCEL)

+        to the latest code from Commons BCEL trunk. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Remove some unused code from the packaged renamed Commons BCEL. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52059">52059</a>: In Windows uninstaller: Do not forget to remove

+        Tomcat keys from 32-bit registry on deinstallation. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Start the process of deprecating unused and unnecessary code that will

+        be removed in the next major release (8.0.x). (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Ignore <code>.git</code> directory when building the source

+        distributive. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove trailing whitespace from the default configuration files.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve <code>RUNNING.txt</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update optional Checkstyle library to 5.5. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        In test suite: add <code>LoggingBaseTest</code> class to allow

+        use of Tomcat logging configuration in tests that do not start Tomcat.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In test suite: speed up <code>TestGroupChannelSenderConnections</code>.

+        Remove 48 seconds worth of waits. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=52148">52148</a>: Add tomcat-coyote.jar to catalina-tasks.xml as this

+        JAR is now required by the Ant tasks. Patch provided by Volker Krebs.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add sample Apache Commons Daemon JSVC wrapper script

+        <code>bin/daemon.sh</code> that can be used with <code>/etc/init.d</code>.

+        (mturk)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)"><!--()--></a><a name="Tomcat_7.0.22_(markt)"><strong>Tomcat 7.0.22 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-10-01</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.22_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51550">51550</a>: An additional change that ensures any exceptions

+        thrown by an Authenticator (or any other Valve configured for the

+        Context) will be handled by the custom error pages for the Context if an

+        appropriate error page is configured. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51580">51580</a>: Added a nicer error message when a WAR file contains

+        filenames not properly encoded in UTF-8. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51687">51687</a>: Added (optional) protection against

+        sun.java2d.Disposer thread pinning a WebappClassLoader into memory

+        in the JreMemoryLeakPreventionListener. (schultz)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51741">51741</a>: Fixes a problem with Eclipse WTP "Serve modules

+        without publishing" feature where applications failed to access

+        resources when using getResource() on the classloader. (slaurent)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51744">51744</a>: Prevent application code from closing the associated

+        JNDI context while the application is running. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression with the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51653">51653</a> that broke custom

+        error pages for 4xx responses from the Authenticators. Error handling

+        and request listeners are now handled in the StandardHostValve to ensure

+        they wrap all Context level activity. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51758">51758</a>: The digester (used for processing XML files) used the

+        logger name <code>org.apache.commons.digester.Digester</code> rather

+        than the expected <code>org.apache.tomcat.util.digester.Digester</code>.

+        The digester has been changed to use the expected logger name.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51774">51774</a>: Fix incorrect cached method signature that prevented

+        session tracking modes from being defined in web.xml when running under

+        a security manager. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add an annotation cache to the <code>DefaultInstanceManager</code> that

+        improves performance for applications that make use of a lot of

+        non-poolable objects (e.g. tag files) that need to be scanned for

+        annotations when created. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use the specification compliant request attribute of

+        <code>javax.servlet.request.ssl_session_id</code> to access the SSL

+        session ID and deprecated the Tomcat specific request attribute. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Allow to overwrite the check for distributability

+        of session attributes by session implementations. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add Java 7 sunec.jar and zipfs.jar to the list of JARs

+        to skip when scanning for TLDs and web fragments. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51862">51862</a>: Added a <code>classesToInitialize</code> attribute to 

+        <code>JreMemoryLeakPreventionListener</code> to allow pre-loading of configurable

+        classes to avoid some classloader leaks. (slaurent)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Reduce visibility of static field <code>ManagerBase.name</code> and

+        make it final. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add thread name to juli OneLineFormatter. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure Servlets that implement ContainerServlet always get treated as

+        restricted. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51872">51872</a>: Ensure that the access log always uses the correct

+        value for the remote IP address associated with the request and that

+        requests with multiple errors do not result in multiple entries in

+        the access log. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.22_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Remove unused and undocumented socketCloseDelay attribute from NIO

+        connector. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49683">49683</a>: Support separate connection and keep-alive timeouts

+        for the APR/native connector HTTP and AJP connectors. (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Further re-factoring of the HTTP connectors to align the BIO, NIO and

+        APR implementations. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51794">51794</a>: Fix race condition in NioEndpoint. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51811">51811</a>: Correct SSL configuration property name from

+        sslImplemenationName to sslImplementationName. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix a timing issue in NIO connector that meant that stopping a connector

+        did not trigger a Comet END event if the associated processor was

+        processing a READ event when the connector was stopped. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Replace unneeded call that iterated events queue in NioEndpoint.Poller.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51860">51860</a>: Fix issues if using NIO with a custom

+        SSLImplementation. Based on a suggestion by Roman Tsirulnikov. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Allow the BIO HTTP connector to be used with SSL when running under Java

+        7. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Don't send AJP CPONG if endpoint is already paused. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Align APR AJP connector with NIO one. Send 503 if endpoint is paused.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Accept AJP request even if endpoint is paused, if CPING was successful.

+        (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.22_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When unloading JSPs due to configuration of the

+        <code>maxLoadedJsps</code> initialisation parameter, the unloading code

+        was retaining a reference to the to the unloaded JSP preventing the

+        associated class from being unloaded until the JSP that replaced it was

+        itself unloaded. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51852">51852</a>: Correct two problems in the handling of varargs

+        methods with the BeanELResolver. The first meant the wrong method was

+        sometimes called and the second that an ArrayIndexOutOfBoundsExceptions

+        could be thrown. Patch (including a test case) provided by Matt Benson.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.22_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Refactor cluster manager configuration: move handling of common

+        attributes to base class. (kfujino, rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        New cluster manager attribute <code>sessionAttributeFilter</code>

+        allows to filter which session attributes are replicated using a

+        regular expression applied to the attribute name. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.22_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the documentation for <code>connectionLinger</code> attribute

+        for the AJP and HTTP connectors. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Document caveat of using <code>RemoteAddrValve</code> with IPv6

+        addresses. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.22_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In jdbc-pool: Avoid IllegalArgumentException when setting maxActive 

+        less than or equal to 0.

+        ArrayBlockingQueue doesn't allow capacity of 0 or less. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48392">48392</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1169796">r1169796</a>): Fix typo in

+        <code>StatementDecoratorInterceptor</code>. (fhanik) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51139">51139</a>:

+        In jdbc-pool: validatorClassName and suspectTimeout are ignored. 

+        In order to support them correctly, validatorClassName and 

+        suspectTimeout are added to a property list. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51786">51786</a>:

+        In jdbc-pool: Discarded connection is not active in a pool any longer. 

+        It removes from the active connection list. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51871">51871</a>: Fix dependency in Maven POM file of

+        tomcat-jbdc. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.22 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.22_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the "test" target in the default build file to report a test

+        failure only after all available connector variants (bio, nio, apr)

+        have been tested. Do not stop after first connector that fails.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51887">51887</a>: When running the unit tests, use a fast but insecure

+        random number source for session ID generation to reduce the delays

+        caused by waiting for entropy. (kkolinko/markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Code clean-up to further reduce the number of warnings reported by

+        Eclipse, FindBugs and CheckStyle. (markt/kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>  

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)"><!--()--></a><a name="Tomcat_7.0.21_(markt)"><strong>Tomcat 7.0.21 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-09-01</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.21_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=41718">41718</a>: Include a response body when sending a redirect.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51640">51640</a>: Improve the memory leak prevention for leaks triggered

+        by java.sql.DriverManager. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51644">51644</a>: Fix annotation scanning for contexts with a

+        multi-level context path such as /a/b. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Unregisters MBean of DataSource when web application stops. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51650">51650</a>: Code clean-up. Patch provided by Felix Schumacher.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51653">51653</a>: Move application level error page handling from the

+        Host to the Context. This ensures that application error page handling

+        is completed before the requestDestroyed event of any

+        ServletRequestListener is fired. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51654">51654</a>: Improve handling of invalid appBase settings for Host

+        elements. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51658">51658</a>: Fix possible NPE when logging a failed request. Based

+        on a suggestion by Felix Schumacher. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51688">51688</a>: JreMemoryLeakPreventionListener now protects against

+        AWT thread creation. (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51712">51712</a>: Ensure cache control headers are sent when appropriate

+        even if the request is secure. Patch provided by Michael Zampani.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51713">51713</a>: Improve message that is logged if there is an error

+        in the value of <code>protocol</code> in a <code>Connector</code>.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51739">51739</a>: When using a landing page with FORM authentication

+        ensure that the request has a valid HTTP method. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.21_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51641">51641</a>: Use correct key when removing processor instances from

+        the connections map during clean-up. Patch provided by zhh. (mark)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        More changes to align the code between the different HTTP connectors.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure AjpMessage headers are correct for the direction of the message.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>

+        Code clean-up and re-factoring to reduce duplicate code in the AJP

+        processor implementations. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Detect incomplete AJP messages and reject the associated request if one

+        is found. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51698">51698</a>: Fix CVE-2011-3190. Prevent AJP message injection.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.21_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=41673">41673</a>: Use platform line-endings when reporting compilation

+        errors. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.21_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51736">51736</a>: Make rpcTimeout configurable in BackupManager. 

+        (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.21_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51649">51649</a>: Update the documentation web application to include

+        the ThreadLocal leak prevention listener. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.21_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51583">51583</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1157874">r1157874</a>, <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1162102">r1162102</a>): Fix

+        shutdown delay in jdbc-pool. (fhanik/kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.21 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.21_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51558">51558</a>: Don't force the use of StandardManager when using

+        any of the <code>Tomcat#addWebapp()</code> methods. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51704">51704</a>: Make use of <code>File#mkdirs()</code> more robust.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>  

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.20 (markt)"><!--()--></a><a name="Tomcat_7.0.20_(markt)"><strong>Tomcat 7.0.20 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-08-11</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.20 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.20_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Corrected missing comma in the value of <code>jarsToSkip</code>

+        property in <code>conf/catalina.properties</code> file, which

+        caused tomcat-jdbc.jar and commons-beanutils*.jar to be not

+        ignored when scanning jars for tag libraries. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=41709">41709</a>: Provide exception messages where no message is

+        provided currently for IllegalStateExcpetions triggered by calling

+        HttpServletResponse methods when the reponse is committed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51509">51509</a>: Fix potential concurrency issue in CSRF prevention

+        filter that may lead to some requests failing that should not. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51518">51518</a>: Correct error in web.xml parsing rules for the

+        &lt;others/&gt; tag when using absolute ordering. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Move the SetCharacterEncoding filter from the examples web application

+        to the <code>org.apache.catalina.filters</code> package so it is

+        available for all web applications. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51550">51550</a>: Internal errors in Tomcat components that process

+        requests before they are passed to a web application, such as

+        Authenticators, now return a 500 response rather than a 200 response.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51555">51555</a>: Allow destroy() to be called on Lifecycle components

+        that are in the initialized state. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add x-threadname pattern format token to ExtendedAccessLogValve to log

+        the current request thread name. Based on a patch from Felix Schumacher.

+        (timw)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51584">51584</a>: Ensure file paths are encoded/decoded when translated

+        to/from URLs when working with resources from a Context so special

+        characters don't cause issues. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51586">51586</a>: Expand error handling to cover anything that is

+        recoverable (or might be recoverable) when loading classes during

+        HandlesTypes processing. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51588">51588</a>: Make it easier to extend the AccessLogValve to add

+        support for custom elements. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that calls to StandardWrapper methods() that may trigger creation

+        of a Servlet instance always do so in way that correctly instantiates a

+        Servlet instance. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In JDBCStore: Committing connection if autoCommit is false.

+        Make sure committed connection is returned to the pool if datasource is 

+        enabled. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Split <code>condition</code> attribute of AccessLogValve into two,

+        <code>conditionIf</code> and <code>conditionUnless</code>. Implement

+        conditional logging that logs only if a request attribute is present.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Allow to have several AccessLogValve instances in the same scope (e.g.

+        in the same Context). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51610">51610</a>: If an unchecked exception occurs during a lifecycle

+        transition (e.g. web application start) ensure that the component is

+        put into the failed state. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51614">51614</a>: Avoid calling store.load() and  session.expire()

+        twice in PersistentManager when expiring sessions. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent spurious log warnings on container stop if a child component has

+        previously failed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add missing getter and setter for the alwaysUseSession attribute of the

+        authenticators. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.20 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.20_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49595">49595</a>: Prevent JVM crash with the AJP APR connector when

+        flushing a closed socket. (jfclere)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50394">50394</a>: Return -1 instead of throwing an exception when

+        encountering an EOF while processing an input stream with the HTTP APR

+        connector. (jfclere)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly handle a connectionTimeout value of -1 (no timeout) for the

+        HTTP NIO and AJP NIO connectors. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51503">51503</a>: Add additional validation that prevents a connector

+        from starting if it does not have a port &gt; 0. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51557">51557</a>: Ignore HTTP headers that do not comply with RFC 2616

+        and use header names that are not tokens. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve error handling for HTTP APR if an error occurs while using

+        sendfile. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that when using sendfile, HTTP APR sockets are not added to

+        multiple pollers. This may cause errors during shutdown. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Set <code>reuse</code> flag of final AJP <code>END_RESPONSE</code>

+        packet to <code>0</code> if we plan to close the connection. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Correctly indicate if socket is closing when calling recycle for the AJP

+        NIO processor. Note since the flag is unused in this case there were no

+        bugs triggered by the re-factoring error. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.20 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.20_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51532">51532</a>: JSP files with dependencies in JARs were recompiled on

+        every access leading to poor performance. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51544">51544</a>: Correctly resolve bean methods in EL so accessible

+        methods that are overridden by inaccessible methods do not cause an

+        IllegalAccessException. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.20 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.20_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=41498">41498</a>: Add the allRolesMode attribute to the Realm

+        configuration page in the documentation web application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48997">48997</a>: Fixed some typos and correct cross-referencing to the

+        HTTP Connector documentation with the SSL How-To page of the

+        documentation web application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49122">49122</a>: Improvements and fixes for index page for ROOT web

+        application. Based on a patch provided by pidster. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51516">51516</a>: Correct documentation web application to show correct

+        system property name for changing the name of the SSO session cookie.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Configure the Manager and Host Manager web applications with the Set

+        Character Encoding Filter to make the default request character encoding

+        UTF-8 to improve i18n support. Note that best results will be obtained

+        if the connector is also configured with

+        <code>URIEncoding="UTF-8"</code>.(markt)  

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the documentation web application to be even more explicit about

+        the implications of setting the path attribute on a Context element in

+        server.xml. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51561">51561</a>: Update the Realm page within the documentation web

+        application to recommend the use of digest.[bat|sh] to generate digests

+        rather than calling RealmBase directly. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51567">51567</a>: Update the class loading page of the documentation

+        web application to include information on the search order for the

+        common class loader when separate values are used for $CATALINA_HOME and

+        $CATALINA_BASE. (markt) 

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve class loading documentation and logging documentation.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add information to the security page of the the documentation web

+        application for the ciphers attribute of the Connector element. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.20 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.20_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51503">51503</a>: Add additional validation to Windows installer that

+        ensure that the shutdown port, HTTP port and AJP port are all specified

+        during the install process. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51531">51531</a>: Update sample Eclipse classpath file to reflect

+        updated ECJ jar. Patch provided by Ian Brandt. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Convert Tomcat unit tests to JUnit 4. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update optional CheckStyle library to 5.4. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove <code>resolveHosts</code> attribute from AccessLogValve

+        configuration in the default <code>server.xml</code>. It was documented

+        in 7.0.19 that it has no effect. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Simplify mapping for <code>jsp</code> servlet in the default

+        <code>web.xml</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly handle uninstall with the Windows installer if the service is

+        installed with a name that contains a '-' character. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51598">51598</a>: Prevent direct invocation of the Windows uninstaller

+        without a service name from executing since the uninstall will not be

+        complete. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use Tomcat icon (cat) instead of Apache Commons Daemon (feather) one

+        in the list of uninstallable programs on Windows. (kkolinko) 

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.7. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51621">51621</a>: Add additional required JARs to the deployer

+        distribution. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix a small number of warnings reported by FindBugs. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to version 1.1.22 of the native component for the AJP APR/native

+        and HTTP APR/native connectors. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)"><!--()--></a><a name="Tomcat_7.0.19_(markt)"><strong>Tomcat 7.0.19 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-07-19</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.19_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add option to activate access log for unit tests. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix regression in year number formatting for AccessLogValve. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46252">46252</a>: Allow to specify character set to be used to write

+        the access log in AccessLogValve. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51494">51494</a>: Prevent an NPE when a long running request completes

+        if the associated web application was destroyed while the request was

+        processing. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Allow choosing a locale for timestamp formatting in AccessLogValve.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When generating access logs for errors, log at the Context/Host level if

+        a Context or Host can be identified for the failed request. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Create a directory for access log or error log (in AccessLogValve and

+        in JULI FileHandler) automatically when it is specified as a part of

+        the file name, e.g. in the <code>prefix</code> attribute. Earlier this

+        happened only if it was specified with the <code>directory</code>

+        attribute. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Log a failure if access log file cannot be opened. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use en_US as locale for timestamps in ExtendedAccessLogValve.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use en_US as locale for creationdate in WebdavServlet. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.19_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51477">51477</a>: Support all SSL protocol combinations in the

+        APR/native connector. This only works when using the native library

+        version 1.1.21 or later, which is not yet released. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Various refactorings to reduce code duplication and unnecessary code in

+        the connectors. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct regression introduced in 7.0.17 that triggered 400 entries in

+        the AccessLog when using the AJP/BIO connector. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix regression producing invalid MBean names when using IPV6

+        addresses for connectors. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add missing thread name in RequestProcessor when Servlet 3 Async

+        is used. Fixes null thread name in access log and JMX MBean. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix CVE-2011-2526. Protect against infinite loops (HTTP NIO) and crashes

+        (HTTP APR) if sendfile is configured to send more data than is available

+        in the file. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent NPEs when a socket is closed in non-error conditions after

+        sendfile processing when using the HTTP NIO connector. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.19_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove unnecessary server.xml parsing code for old cluster

+        implementation that does not ship as part of Tomcat 7. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.19_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add additional information to the documentation web application on the

+        benefits and remaining risks when running under a security manager.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51490">51490</a>: Correct broken HTML in JSP tag plugin examples and

+        improve the &lt;c:if&gt; example to make failures more obvious. Based on

+        suggestions by Charles. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Document ExtendedAccessLogValve. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct default value of <code>enableLookups</code> for connectors

+        and mention, that <code>resolveHosts</code> for the AccessLogValve

+        is replaced by <code>enableLookups</code>. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)/jdbc-pool"><!--()--></a><a name="Tomcat_7.0.19_(markt)/jdbc-pool"><strong>jdbc-pool</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Include jdbc-pool into Tomcat release. (fhanik)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.19 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.19_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.6. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Eclipse JDT Compiler 3.7. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.18 (markt)"><!--()--></a><a name="Tomcat_7.0.18_(markt)"><strong>Tomcat 7.0.18 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.18 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.18_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct regression introduced in 7.0.17 that triggered an NPE if a

+        CrawlerSessionManagerValve was used without setting crawlerUserAgents.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51466">51466</a>: Correct comment typos in HostManagerServlet. Patch

+        provided by Felix Schumacher. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51467">51467</a>: Invoke Thread.start() rather than Thread.run() so that

+        listeners and filters are stopped in a separate thread rather than the

+        current thread. Patch provided by Felix Schumacher. (markt)  

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51473">51473</a>: Fix concatenation of values in

+        <code>SecurityConfig.setSecurityProperty()</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix response.encodeURL() for the special case of an absolute URL

+        with no path segment (http://name). (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.18 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.18_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct regression caused by connector re-factoring that made AJP

+        APR/native connector very unstable on Windows platforms. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct regression caused by connector re-factoring that meant that

+        sendfile data was not reset between pipe-lined HTTP requests. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.18 (markt)/Tribes"><!--()--></a><a name="Tomcat_7.0.18_(markt)/Tribes"><strong>Tribes</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Re-factor tests to align packages for tests with the classes under test.

+        Start to convert non-JUnit tests to JUnit. Remove unnecessary code.

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add synchronization to receiver socket binding to prevent test failures

+        on Linux. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.18 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.18_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        More code clean-up to remove unused code and reduce IDE warnings.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Further improvements to the Windows installer. (markt/kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)"><!--()--></a><a name="Tomcat_7.0.17_(markt)"><strong>Tomcat 7.0.17 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.17_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48956">48956</a>: Add regular expression support for SSI. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49165">49165</a>: Allow any time stamp formats supported by

+        SimpleDateFormat in AccessLogValve. Support logging begin and/or end of

+        request. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50677">50677</a>: Allow system property variables to be used in the

+        values of "common.loader" and other "*.loader" properties in the

+        <code>catalina.properties</code> file. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51376">51376</a>: When adding a Servlet via

+        ServletContext#addServlet(String, Servlet), the Servlet was not

+        initialized when the web application started and a load on startup value

+        was set. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51386">51386</a>: Correct code for processing @HandlesTypes annotations

+        so only types of interest are reported to a ServletContainerInitializer.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Add the Tomcat extras, ant-junit and Java Help Jars to the list of JARs

+        to skip when scanning for TLDs and web fragments. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        The fix for bug <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51310">51310</a> caused a regression that re-introduced

+        bug <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49957">49957</a> and deleted the contents of the work directory

+        when Tomcat was shutdown. This fix ensures that that work directory for

+        an application is not deleted when Tomcat is shutdown. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct issues with JULI's OneLineFormatter including: correctly

+        re-using formatted timestamps when possible; thread-safety issues in

+        timestamp formatting; correcting the output of any milliseconds to

+        include leading zeros and formatting any parameters present.

+        (kkolinko/markt/rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51395">51395</a>: Fix memory leak triggered when an application that

+        includes a SAXParserFactory is the first web application to be loaded.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51396">51396</a>: Correctly handle jsp-file entries in web.xml when the

+        JSP servlet has been configured via code when embedding Tomcat. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51400">51400</a>: Avoid known bottleneck in JVM when converting between

+        Strings and bytes by always providing a Charset rather than an encoding

+        name. Based on a patch by Dave Engberg. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51401">51401</a>: Correctly initialise shared WebRuleSet instance used

+        by the digesters that parse web.xml and prevent incorrect warnings about

+        multiple occurrences of elements that are only allowed to appear once in

+        web.xml and web-fragment.xml. (kfujino)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51403">51403</a>: Avoid NPE in JULI FileHandler if formatter is

+        misconfigured. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Previous improvements in JAR scanning performance introduced a start-up

+        performance penalty for some use cases. This fix addresses those

+        performance penalties while retaining the original improvements. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51418">51418</a>: Provide more control over Context creation when

+        embedding Tomcat. Based on a patch by Benson Margulies. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove redundant copy of catalina.properties from o.a.c.startup.

+        Generate this copy for inclusion in bin and src jars during the

+        ant "compile" task. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use system properties loaded from catalina.properties via the class

+        path in unit tests. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve JMX unit test. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix IllegalStateException for JavaScript files when switching from

+        Writer to OutputStream. The special handling of this case in the

+        DefaultServlet was broken due to a MIME type change for JavaScript.

+        (funkman)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix CVE-2011-2204. Prevent user passwords appearing in log files if a

+        runtime exception (e.g. OOME) occurs while creating a new user for a

+        MemoryUserDatabase via JMX. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix an issue with the CrawlerSessionManagerValve that meant sessions

+        were not always correctly tracked. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51436">51436</a>: Send 100 (Continue) response earlier to enable

+        ServletRequestListener implementations to read the request body. Based

+        on a patch by Simon Olofsson. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure an access log entry is made if an error occurs during

+        asynchronous request processing and the socket is immediately closed.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that if asyncDispatch() is called during an onTimeout event and

+        the target Servlet does not call startAsync() or complete() that Tomcat

+        calls complete() once the target Servlet exits. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve the handling for Servlets that implement the deprecated

+        SingleThreadModel when embedding Tomcat. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51445">51445</a>: Correctly initialise all instances of Servlets that

+        implement SingleThreadModel. Based on a patch by Felix Schumacher.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51453">51453</a>: Fix a regression in the preemptive authentication

+        support (enhancement <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=12428">12428</a>) that could trigger authentication

+        even if preemptive authentication was disabled. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent possible NPE when serving Servlets that implement the

+        SingleThreadModel interface. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In launcher for embedded Tomcat: do not change <code>catalina.home</code>

+        system property if it had a value. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When using Servlets that implement the SingleThreadModel interface, add

+        the single instance created to the pool when it is determined that a

+        pool of servlets is required rather than throwing it away. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.17_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix unit test for bindOnInit which was failing for APR on some

+        platforms. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove superfluous quotes from thread names for connection pools.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix crash observed during pausing the connector when using APR.

+        Only add socket to poller if we are sure we don't close it later.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Various refactorings to reduce code duplication and unnecessary code in

+        the connectors. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression introduced in Apache Tomcat 7.0.11 that broke

+        certificate revocation list handling. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.17_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve the message printed by TldLocationsCache and add configuration

+        example to the <code>logging.properties</code> file. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=33453">33453</a>: Recompile JSPs if last modified time of the source or

+        any of its dependencies changes either forwards or backwards. Note that

+        this introduces an incompatible change to the code generated for JSPs.

+        Tomcat will automatically re-compile any JSPs and tag files found in the

+        work directory when upgrading from 7.0.16 or earlier to 7.0.17 or later.

+        If you later downgrade from 7.0.17 or later to 7.0.16 or earlier, you

+        must empty the work directory as part of the downgrade process. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=36362">36362</a>: Handle the case where tag file attributes (which can

+        use any valid XML name) have a name which is not a Java identifier.

+        (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Broaden the exception handling in the EL Parser so that more failures to

+        parse an expression include the failed expression in the exception

+        message. Hopefully, this will help track down the cause of

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51088">51088</a>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.17_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51306">51306</a>: Avoid NPE when handleSESSION_EXPIRED is processed 

+        while handleSESSION_CREATED is being processed. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Notifications of changes in session ID to other nodes in the cluster

+        should be controlled by notifySessionListenersOnReplication rather than

+        notifyListenersOnReplication. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        The change in session ID is notified to the container event listener on 

+        the backup node in cluster. 

+        This notification is controlled by 

+        notifyContainerListenersOnReplication.(kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.17_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update Maven repository information in the documentation to reflect

+        current usage. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=43538">43538</a>: Add host name and IP address to the HTML Manager

+        application. Patch by Dennis Lundberg. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add <code>session="false"</code> directive to the index page of the

+        ROOT web application. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51443">51443</a>: Document the notifySessionListenersOnReplication

+        attribute for the DeltaManager. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51447">51447</a>: Viewing a back up session in the HTML Manager web

+        application no longer changes the session to a primary session. Based on

+        a patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.17 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.17_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=33262">33262</a>: Install monitor to auto-start for current user only

+        rather than all users to be consistent with menu item creation. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=40510">40510</a>: Provide an option to install shortcuts for the current

+        user or all users. Also ensure registry is correctly cleaned on

+        uninstall for 64-bit platforms. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50949">50949</a>: Provide the ability to specify the AJP port and

+        service name when installing Tomcat using the Windows installer. This

+        permits multiple instances of the same Tomcat version to be installed

+        side-by-side. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Clean up shell and batch scripts (improve consistency,

+        clarify comments, add <code>configtest</code> command support for

+        Windows). (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51206">51206</a>: Make CATALINA_BASE visible for setenv.sh. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove unnecessary variable BASEDIR from scripts. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51425">51425</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51450">51450</a>: Update Spanish translations. Based

+        on patches provided by Jesus Marin. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.16 (markt)"><!--()--></a><a name="Tomcat_7.0.16_(markt)"><strong>Tomcat 7.0.16 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-06-17</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.16 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.16_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51249">51249</a>: Further improve system property replacement code

+        in ClassLoaderLogManager of Tomcat JULI to cover some corner cases.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51264">51264</a>: Improve the previous fix for this issue by returning

+        the connection to the pool when not in use so it does not appear to be

+        an abandoned connection. Patch provided by Felix Schumacher. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51324">51324</a>: Improve handling of exceptions when flushing the

+        response buffer to ensure that the doFlush flag does not get stuck in

+        the enabled state. Patch provided by Jeremy Norris. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51278">51278</a> that prevented any

+        web application from being marked as distributable. (kfujino/markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51278">51278</a> that prevented a

+        web application from overriding the default welcome files. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Enable remaining valves for Servlet 3 asynchronous processing support.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid possible NPE when logging requests received during embedded Tomcat

+        shutdown. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51340">51340</a>: Fix thread-safety issue when parsing multiple web.xml

+        files in parallel. Apache Tomcat does not do this but products that

+        embed it may. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51344">51344</a>: Fix problem with Lifecycle re-factoring for deprecated

+        embedded class that prevented events being triggered. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51348">51348</a>: Prevent possible NPE when processing WebDAV locks.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.16 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.16_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When parsing the port in the HTTP host header, restrict the value to be

+        base 10 integer digits rather than hexadecimal ones.

+        (rjung/markt/kkolinko) 

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Various refactorings to reduce code duplication and unnecessary code in

+        the connectors. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.16 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.16_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Change JAR scanning log messages where no TLDs are found to DEBUG level

+        and replace the multiple messages with a single INFO level message that

+        indicates that at least one JAR was scanned needlessly and how to obtain

+        more info. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.16 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.16_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Enable Servlet 3 asynchronous processing support when using clustering.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.16 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.16_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the log4j configuration settings when defining conversion

+        patterns in the documentation web application. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)"><!--()--></a><a name="Tomcat_7.0.15_(markt)"><strong>Tomcat 7.0.15 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.15_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=27122">27122</a>: Remove a workaround for a very old and since fixed

+        Mozilla bug and change the default value of the securePagesWithPragma

+        attribute of the Authenticator Valves to false. These changes should

+        reduce the likelihood of issues when downloading files with IE. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=35054">35054</a>: Check that a file is not specified for a Host's

+        appBase and log an error if it is. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51197">51197</a>: Fix possible dropped connection when sendError or

+        sendRedirect are used during async processing. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51221">51221</a>: Correct Spanish translation of text used in a 302

+        response. Patch provided by Paco Sober&oacute;n. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51249">51249</a>: Correct ClassLoaderLogManager system property

+        replacement code so properties of the form "}${...}" can be used

+        without error. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51264">51264</a>: Allow the JDBC persistent session store to use a

+        JNDI datasource to define the database in which sessions are persisted.

+        Patch provided by Felix Schumacher. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51274">51274</a>: Add missing i18n strings in PersistentManagerBase.

+        Patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51276">51276</a>: Provide an abstraction for accessing content in JARs

+        so the most efficient method can be selected depending on the type of

+        URL used to identify the JAR. This improves startup time when JARs are

+        located in $CATALINA_BASE/lib. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51277">51277</a>: Improve error message if an application is deployed

+        with an incomplete FORM authentication configuration. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51278">51278</a>: Allow ServletContainerInitializers to override

+        settings in the global default web.xml and the host web.xml. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51310">51310</a>: When stopping the Server object on shutdown call

+        destroy() after calling stop(). (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.15_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51145">51145</a>: Add an AJP-NIO connector. (markt/rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.15_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51220">51220</a>: Add a system property to enable tag pooling with JSPs

+        that use a custom base class. Based on a patch by Dan Mikusa. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Include a comment header in generated java files that indicates when the

+        file was generated and which version of Tomcat generated it. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51240">51240</a>: Ensure that maxConnections limit is enforced when

+        multiple acceptor threads are configured. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.15_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51230">51230</a>: Add missing attributes to JMX for ReplicationValve and

+        JvmRouteBinderValve. Patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.15_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add documentation for AJP-NIO connector. (markt/rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51182">51182</a>: Document JAAS supported added in <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51119">51119</a>.

+        Patch provided by Neil Laurance. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51225">51225</a>: Fix broken documentation links for non-English locales

+        in the HTML Manager application. Patch provided by Eiji Takahashi.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51229">51229</a>: Fix bugs in the Servlet 3.0 asynchronous examples.

+        Patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51251">51251</a>: Add web application version support to the Ant tasks.

+        Based on a patch provided by Eiji Takahashi. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51294">51294</a>: Clarify behaviour of unpackWAR attribute of

+        StandardContext components. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.15 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.15_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46451">46451</a>: Configure svn:bugtraq properties for Tomcat trunk.

+        Based on a patch provided by Marc Guillemot. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51309">51309</a>: Correct logic in catalina.sh stop when using a PID

+        file to ensure the correct message is shown. Patch provided by Caio

+        Cezar. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.14 (markt)"><!--()--></a><a name="Tomcat_7.0.14_(markt)"><strong>Tomcat 7.0.14 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-05-12</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.14 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.14_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Stylistic improvements to MIME type sync script.

+        Based on a patch provided by Felix Schumacher. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that the SSLValve provides the SSL key size as an Integer rather

+        than a String. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that the RemoteIpValve works correctly with Servlet 3.0

+        asynchronous requests. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use safe equality test when determining event type in the

+        MapperListener. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use correct class loader when loading Servlet classes in

+        StandardWrapper. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide additional configuration options for the RemoteIpValve and

+        RemoteIpFilter to allow greater control over the values returned by

+        ServletRequest#getServerPort() and ServletRequest#getLocalPort() when

+        Tomcat is behind a reverse proxy. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure session cookie paths end in <code>/</code> so that session

+        cookies created for a context with a path of <code>/foo</code> do not

+        get returned with requests mapped to a context with a path of

+        <code>/foobar</code>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.14 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.14_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51177">51177</a>: Ensure Tomcat's MapElResolver always returns

+        <code>Object.class</code> for <code>getType()</code> as required by the

+        EL specification. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)"><!--()--></a><a name="Tomcat_7.0.13_(markt)"><strong>Tomcat 7.0.13 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.13_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct mix-up in Realm Javadoc. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix display of response headers in AccessLogValve. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Implement display of multiple request headers in AccessLogValve:

+        print not just the value of the first header, but of the all of them,

+        separated by commas. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50306">50306</a>: New StuckThreadDetectionValve to detect requests that

+        take a long time to process, which might indicate that their processing

+        threads are stuck. Based on a patch provided by TomLu. (slaurent)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51038">51038</a>: Ensure that asynchronous requests are included in

+        access logs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51042">51042</a>: Don't trigger session creation listeners when a

+        session ID is changed as part of the authentication process. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51050">51050</a>: Add additional common but non-standard file extension

+        to MIME type mappings for MPEG 4 files. Based on a patch by C&eacute;drik Lime.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add some additional common JARs that do not contain TLDs or web

+        fragments to the list of JARs to skip when scanning for TLDs and web

+        fragments. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        While scanning JARs for TLDs and fragments, avoid using JarFile and use

+        JarInputStream as in most circumstances where JARs are scanned, JarFile

+        will create a temporary copy of the JAR rather than using the resource

+        directly. This change significantly improves startup performance for

+        applications with lots of JARs to be scanned. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure response is committed when <code>AsyncContext#complete()</code>

+        is called. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add a container event that is fired when a session's ID is changed,

+        e.g. on authentication. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51099">51099</a>: Correctly implement non-default login configurations

+        (configured via the loginConfigName attribute) for the the SPNEGO

+        authenticator. (fhanik/markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51119">51119</a>: Add JAAS authentication support to the

+        JMXRemoteLifecycleListener. Patch provided by Neil Laurance. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51136">51136</a>: Provide methods that enable the name of a Context on

+        Context creation when using Tomcat in an embedded scenario. Based on a

+        patch provided by David Calavera. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51137">51137</a>: Add additional Microsoft Office MIME type mappings.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Partial sync of MIME type mapping with mime.types from the Apache web

+        server. About 600 MIME types added, some changed. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make access logging more robust when logging requests that generate 400

+        responses since the request object is unlikely to be fully/correctly

+        populated in that case. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.13_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50957">50957</a>: Fix regression in HTTP BIO connector that triggered

+        errors when processing pipe-lined requests. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50158">50158</a>: Ensure the asynchronous requests never timeout if the

+        timeout is set to zero or less. Based on a patch provided by Chris.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51073">51073</a>: Throw an exception and do not start the APR connector

+        if it is configured for SSL and an invalid value is provided for

+        SSLProtocol. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Align all the connector implementations with the documented default

+        setting for processorCache of 200. This changes the default from -1

+        (unlimited) for the AJP-BIO, AJP-APR and HTTP-APR connectors. Additional

+        information was also added to the documentation on how to select an

+        appropriate value. 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Take account of time spent waiting for a processing thread when

+        calculating connection and keep-alive timeouts for the HTTP BIO

+        connector. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51095">51095</a>: Don't trigger a NullPointerException when the SSL

+        handshake fails with the HTTP-APR connector. Patch provided by Mike

+        Glazer. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve handling in AJP connectors of the case where too large a AJP

+        packet is received. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Restore the automatic disabling of HTTP keep-alive with the BIO

+        connector once 75% of the processing threads are in use and make the

+        threshold configurable. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make pollerSize and maxConnections synonyms for the APR connectors since

+        they perform the same function. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Use maxThreads rather than 10000 as the default maxConnections for the

+        BIO connectors. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.13_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=47371">47371</a>: Correctly coerce the empty string to zero when used as

+        an operand in EL arithmetic. Patch provided by gbt. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Label JSP/tag file line and column numbers when reporting errors since

+        it may not be immediately obvious what the numbers represent. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49916">49916</a> that resulted in

+        JSPs being compiled twice rather than just once. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Log JARs that are scanned for TLDs where no TLD is found so that users

+        can easily identify JARs that can be added to the list of JARs to skip.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Use a single TLD location cache for a web application rather than one

+        per JSP compilation to speed up JSP compilation. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51124">51124</a>: Refactor BodyContentImpl to assist in determining the

+        root cause of this bug. Based on a patch by Ramiro. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.13_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50950">50950</a>: Correct possible NotSerializableException for an

+        authenticated session when running with a security manager. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.13_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Configure Security Manager How-To to include a copy of the actual

+        conf/catalina.policy file when the documentation is built, rather

+        than maintaining a copy of its content. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix broken stylesheet URL in XML based manager status output. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51156">51156</a>: Ensure session expiration option is available in

+        Manager application was running web applications that were defined in

+        server.xml. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.13 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.13_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Clarify error messages in *.sh files to mention that if a script is

+        not found it might be because execute permission is needed. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Apache Commons Pool to 1.5.6. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51135">51135</a>: Fix auto-detection of JAVA_HOME for 64-bit Windows

+        platforms that only have a 32-bit JVM installed. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51154">51154</a>: Remove duplicate @deprecated tags in ServletContext

+        Javadoc. Patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=51155">51155</a>: Add comments to @deprecated tags that have none. Patch

+        provided by sebb. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.12 (markt)"><!--()--></a><a name="Tomcat_7.0.12_(markt)"><strong>Tomcat 7.0.12 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-04-06</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.12 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.12_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Automatically correct invalid paths when specified for Context elements

+        inside server.xml and log a warning that the configuration has been

+        corrected. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't unpack WAR files if they are not located in the Host's

+        appBase. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't log to standard out in SSLValve. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Handle the case where a web crawler provides an invalid session ID in

+        the CrawlerSessionManagerValve. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update pattern used in CrawlerSessionManagerValve to that used by the

+        ASF infrastructure team. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove unnecessary whitespace from MIME mapping entries in global

+        web.xml file. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When using parallel deployment, correctly handle the scenario when the

+        client sends multiple JSESSIONID cookies. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=12428">12428</a>: Add support (disabled by default) for preemptive

+        authentication. This can be configured per context. Based on a patch

+        suggested by Werner Donn. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make the CSRF nonce cache serializable so that it can be replicated

+        across a cluster and/or persisted across Tomcat restarts. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Resolve some refactoring TODOs in the implementation of the new Context

+        attribute "swallowAbortedUploads". (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Include the seed time when calculating the time taken to create

+        SecureRandom instances for session ID generation, report excessive times

+        (greater than 100ms) at INFO level and provide a value for the message

+        key so a meaningful message appears in the logs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't register Contexts that fail to start with the Mapper. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48685">48685</a>: Add initial support for SPNEGO/Kerberos authentication

+        also referred to as integrated Windows authentication. This includes

+        user authentication, authorisation via the directory using the

+        user's delegated credentials and exposing the user's delegated

+        credentials via a request attribute so applications can make use of them

+        to impersonate the current user when accessing third-party systems that

+        use a compatible authentication mechanism. Based on a patch provided by

+        Michael Osipov. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        HTTP range requests cannot be reliably served when a Writer is in use so

+        prevent the DefaultServlet from attempting to do so. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Protect the DefaultServlet from Valves, Filters and Wrappers that write

+        content to the response. Prevent partial responses to partial GET

+        requests in this case since the range cannot be reliably determined.

+        Also prevent the DefaultServlet from setting a content length header

+        since this too cannot be reliably determined. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50929">50929</a>: When wrapping an exception, include the root cause.

+        Patch provided by sebb. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50991">50991</a>: Fix regression in fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=25060">25060</a> that called

+        close on a JNDI resource while it was still available to the

+        application. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide a configuration option that lets the close method to be used for

+        a JNDI Resource to be defined by the user. This change also disables

+        using the close method unless one is explicitly defined for the

+        resource and limits it to singleton resources. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly track changes to context.xml files and trigger redeployment

+        when copyXML is set to false. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50997">50997</a>: Relax the requirement that directories must have a

+        name ending in <code>.jar</code> to be treated as an expanded JAR file

+        by the default JarScanner. Based on patch by Rodion Zhitomirsky. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't append the jvmRoute to a session ID if the jvmRoute is a zero

+        length string. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't register non-singelton DataSource resources with JMX. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        CVE-2011-1184: Provide additional configuration options for the DIGEST

+        authenticator. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Provide a workaround for Tomcat hanging during shutdown when running the

+        unit tests. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.12 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.12_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50887">50887</a>: Add support for configuring the JSSE provider used to

+        convert client certificates. Based on a patch by pknopp. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50903">50903</a>: When a connector is stopped, ensure that requests that

+        are currently in a keep-alive state and waiting for client data are not

+        processed. Requests where processing has started will continue to

+        completion. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50927">50927</a>: Improve error message when SSLCertificateFile is not

+        specified when using APR with SSL. Based on a patch provided by sebb.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50928">50928</a>: Don't ignore keyPass attribute for HTTP BIO and

+        NIO connectors. Based on a patch provided by sebb. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.12 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.12_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Securely seed the SecureRandom instance used for UUID generation and

+        report excessive creation time (greater than 100ms) at INFO level.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.12 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.12_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50924">50924</a>: Clean-up HTTP connector comparison table. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Slightly expanded the documentation of the Host element to clarify the

+        relationship between host name and DNS name. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50925">50925</a>: Update SSL how-to to take account of

+        <code>keyPass</code> connector attribute. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve Tomcat Logging documentation. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Align the authenticator documentation and MBean descriptors with the

+        implementation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent the custom error pages for the Manager and Host Manager

+        applications from being accessed directly. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50984">50984</a>: When using the Manager application ensure that

+        undeployment fails if a file cannot be deleted. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.12 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.12_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Eclipse JDT complier to 3.6.2. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update WSDL4J library to 1.6.2 (used by JSR 109 support in the extras

+        package). (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update optional CheckStyle library to 5.3. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50911">50911</a>: Reduce noise generated during the build of the Windows

+        installer so warnings are more obvious. Patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Further work to reduce compiler and validation warnings across the code

+        base. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.11 (markt)"><!--()--></a><a name="Tomcat_7.0.11_(markt)"><strong>Tomcat 7.0.11 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-03-11</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.11 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.11_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        CVE-2011-1088: Completed fix. Don't ignore @ServletSecurity

+        annotations. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=25060">25060</a>: Close Apache Commons DBCP datasources when the

+        associated JNDI naming context is stopped (e.g. for a non-global

+        DataSource resource on web application reload) to close remaining

+        database connections immediately rather than waiting for garbage 

+        collection. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=26701">26701</a>: Provide a mechanism for users to register their own

+        <code>URLStreamHandlerFactory</code> objects. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50855">50855</a>: Fix NPE on HttpServletRequest.logout() when debug

+        logging is enabled. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        New context attribute "swallowAbortedUploads" allows

+        to make request data swallowing configurable for requests

+        that are too large. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50854">50854</a>: Add additional permissions required by the Manager

+        application when running under a security Manager and support a shared

+        Manager installation when $CATALINA_HOME != CATALINA_BASE. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50893">50893</a>: Add additional information to the download README for

+        the extras components. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Calling <code>stop()</code> and then <code>destroy()</code> on a

+        connector incorrectly triggered an exception. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.11 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.11_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48208">48208</a>: Allow the configuration of a custom trust manager for

+        use in CLIENT-CERT authentication. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix issues that prevented asynchronous servlets from working when used

+        with the HTTP APR connector on platforms that support TCP_DEFER_ACCEPT.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.11 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.11_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct possible threading issue in JSP compilation when development

+        mode is used. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50895">50895</a>: Don't initialize classes created during the

+        compilation stage. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.10 (markt)"><!--()--></a><a name="Tomcat_7.0.10_(markt)"><strong>Tomcat 7.0.10 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-03-08</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.10 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.10_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        CVE-2011-1088: Partial fix. Don't ignore @ServletSecurity

+        annotations. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=27988">27988</a>: Improve reporting of missing files. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=28852">28852</a>: Add URL encoding where missing to parameters in URLs

+        presented by Ant tasks to the Manager application. Based on a patch by

+        Stephane Bailliez. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve handling of SSL renegotiation by failing earlier when the

+        request body contains more bytes than maxSavePostSize. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve shut down speed by not renewing threads during shut down when

+        the <code>ThreadLocalLeakPreventionListener</code> is enabled. (markt)  

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.10 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.10_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49284">49284</a>: Add SSL re-negotiation support to the HTTP NIO

+        connector and extend test cases to cover CLIENT-CERT authentication.

+        (fhanik/markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)"><!--()--></a><a name="Tomcat_7.0.9_(markt)"><strong>Tomcat 7.0.9 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=19444">19444</a>: Add an option to the JNDI realm to allow role searches

+        to be performed by the authenticated user. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=21669">21669</a>: Add the ability to specify the roleBase for the JNDI

+        Realm as relative to the users DN. Based on a patch by Art W. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=22405">22405</a>: Add a new Lifecycle listener,

+        <code>org.apache.catalina.security.SecurityListener</code> that prevents

+        Tomcat from starting insecurely. It requires that Tomcat is not started

+        as root and that a umask at least as restrictive as 0007 is used. This

+        new listener is not enabled by default.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48863">48863</a>: Better logging when specifying an invalid directory

+        for a class loader. Based on a patch by Ralf Hauser. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48870">48870</a>: Refactor to remove use of parallel arrays. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Enhance the RemoteIpFilter and RemoteIpValve so that the modified remote

+        address, remote host, protocol and server port may be used in an access

+        log if desired. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Restore access to Environments, Resources and ResourceLinks via JMX

+        which was lost in early 7.0.x re-factoring. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove ServerLifecycleListener. This was already removed from server.xml

+        and with the Lifecycle re-factoring is no longer required. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add additional checks to ensure that sub-classes of

+        <code>org.apache.catalina.util.LifecycleBase</code> correctly implement

+        the expected state transitions. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50189">50189</a>: Once the application has finished writing to the

+        response, prevent further reads from the request since this causes

+        various problems in the connectors which do not expect this. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50700">50700</a>: Ensure that the override attribute of context

+        parameters is correctly followed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50721">50721</a>: Correctly handle URL decoding where the URL ends in

+        %nn. Patch provided by Christof Marti. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50737">50737</a>: Add additional information when an invalid WAR file is

+        detected. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50748">50748</a>: Allow the content length header to be set up to the

+        point the response is committed when a writer is being used. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50751">50751</a>: When authenticating with the JNDI Realm, only attempt

+        to read user attributes from the directory if attributes are required.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50752">50752</a>: Fix typo in debug message in deprecated Embedded

+        class. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50789">50789</a>: Provide an option to enable ServletRequestListeners

+        for forwards as required by some CDI frameworks. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50793">50793</a>: When processing Servlet 3.0 async requests, ensure

+        that the requestInitialized and requestDestroyed events are only fired

+        once per request at the correct times. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50802">50802</a>: Ensure that

+        <code>ServletContext.getResourcePaths()</code> includes static resources

+        packaged in JAR files in its output. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Web crawlers can trigger the creation of many thousands of sessions as

+        they crawl a site which may result in significant memory consumption.

+        The new Crawler Session Manager Valve ensures that crawlers are

+        associated with a single session - just like normal users - regardless

+        of whether or not they provide a session token with their requests.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't attempt to start NamingResources for Contexts multiple times.

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50826">50826</a>: Avoid <code>IllegalArgumentException</code> if an

+        embedded Tomcat instance that includes at least one Context is destroyed

+        without ever being started. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure a web application is taken out of service if the web.xml file is

+        not valid. (kkolinko/markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure Servlet 2.2 jspFile elements are correctly converted to use a

+        leading '/' if missing. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50836">50836</a>: Better documentation of the meaning of

+        <code>Lifecycle.isAvailable()</code> and correct a couple of cases where

+        this could incorrectly return true. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50780">50780</a>: Fix memory leak in APR implementation of AJP

+        connector introduced by the refactoring for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49884">49884</a>. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        If server configuration errors and/or faulty applications caused the

+        ulimit for open files to be reached, the acceptor threads for all

+        connectors could enter a tight loop. This loop consumed CPU and also

+        logged an error message for every iteration of the loop which lead to

+        large log files being generated. The acceptors have been enhanced to

+        better handle this situation. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50720">50720</a>: Ensure that the use of non-ISO-8859-1 character sets

+        for web.xml does not trigger an error when Jasper parses the web.xml

+        file. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50726">50726</a>: Ensure that the use of the genStringAsCharArray does

+        not result in String constants that are too long for valid Java code.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50790">50790</a>: Improve method resolution in EL expressions. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50771">50771</a>: Ensure HttpServletRequest#getAuthType() returns the 

+        name of the authentication scheme if request has already been 

+        authenticated. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50713">50713</a>: Remove roles command from the Manager application.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Tribes"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Tribes"><strong>Tribes</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50667">50667</a> (<a href="http://svn.apache.org/viewvc?view=rev&amp;rev=1068549">r1068549</a>): Allow RPC callers to get

+        confirmation when sending a reply. (fhanik)

+      </td></tr>  

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.9 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.9_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50743">50743</a>: Cache CheckStyle results between builds to speed up

+        validation. Patch provided by Oliver. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.8 (markt)"><!--()--></a><a name="Tomcat_7.0.8_(markt)"><strong>Tomcat 7.0.8 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-02-05</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.8 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.8_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix NPE in CoyoteAdapter when postParseRequest() call fails. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+       <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50709">50709</a>: Make <code>ApplicationContextFacade</code> non-final to

+       enable extension. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When running under a security manager, user requests may fail with a

+        security exception. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.8 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.8_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Reduce level of log message for invalid URL parameters from WARNING to

+        INFO. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix hanging Servlet 3 asynchronous requests when using the APR based AJP

+        connector. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.8 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.8_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Align server.xml installed by the Windows installer with the one

+        bundled in zip/tar.gz files. The differences are LockOutRealm being

+        used and AccessLogValve being enabled by default. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)"><!--()--></a><a name="Tomcat_7.0.7_(markt)"><strong>Tomcat 7.0.7 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.7_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=18462">18462</a>: Don't merge <code>stdout</code> and

+        <code>stderr</code> internally so users retain the option to treat them

+        separately. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=18797">18797</a>: Provide protection against <code>null</code> or zero

+        length names being provided for users, roles and groups in the

+        <code>MemoryRealm</code> and <code>UserDatabaseRealm</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50205">50205</a> to trigger an error earlier if invalid

+        configuration is used. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide additional control over component class loaders, primarily for

+        use when embedding. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix NPE in RemoteAddrFilter, RemoteHostFilter. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49711">49711</a>: HttpServletRequest#getParts will work in a filter

+        or servlet without an @MultipartConfig annotation or

+        MultipartConfigElement if the new "allowCasualMultipartParsing"

+        context attribute is set to "true". (schultz)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49978">49978</a>: Correct another instance where deployment incorrectly

+        failed if a directory in the work area already existed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50582">50582</a>: Refactor access logging so chunked encoding is not

+        forced for all requests if bytes sent is logged. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50597">50597</a>: Don't instantiate a new instance of a Filter if

+        an instance was provided via the

+        <code>ServletContext.addFilter(String, Filter)</code> method. Patch

+        provided by Ismael Juma. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50598">50598</a>: Correct URL for Manager text interface. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50620">50620</a>: Stop exceptions that occur during

+        <code>Session.endAccess()</code> from preventing the normal completion

+        of <code>Request.recycle()</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50629">50629</a>: Make <code>StandardContext.bindThread()</code> and

+        <code>StandardContext.unbindThread()</code> protected to allow use by

+        sub-classes. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Use getName() instead of logName() in error messages in StandardContext.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50642">50642</a>: Move the <code>sun.net.www.http.HttpClient</code>

+        keep-alive thread memory leak protection from the

+        JreMemoryLeakPreventionListener to the WebappClassLoader since the

+        thread that triggers the memory leak is created on demand. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50673">50673</a>: Improve Catalina shutdown when running as a service.

+        Do not call System.exit(). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50683">50683</a>: Ensure annotations are scanned when

+        <code>unpackWARs</code> is set to <code>false</code> in the Host

+        where a web application is deployed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve HTTP specification compliance in support of

+        <code>Accept-Language</code> header. This protects from known exploit

+        of the Oracle JVM bug that triggers a DoS, CVE-2010-4476. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.7_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prevent possible thread exhaustion if a Comet timeout event takes a

+        while to complete. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Prvent multiple Comet END events if the CometServlet calls

+        <code>event.close()</code> during an END event. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50325">50325</a>: When the JVM indicates support for RFC 5746, disable

+        Tomcat's <code>allowUnsafeLegacyRenegotiation</code> configuration

+        attribute and use the JVM configuration to control renegotiation.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50405">50405</a>: Fix occassional NPE when using NIO connector and

+        Comet. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure correct recycling of NIO input filters when processing Comet

+        events. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50627">50627</a>: Correct interaction of NIO socket and Poller when

+        processing Comet events. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct interaction of APR socket and Poller when processing Comet

+        events. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50631">50631</a>: InternalNioInputBuffer should honor

+        <code>maxHttpHeadSize</code>. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.7_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve special case handling of

+        <code>javax.servlet.jsp.el.ScopedAttributeELResolver</code> in

+        <code>javax.el.CompositeELResolver</code> to handle sub-classes. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=15688">15688</a>: Use fully-qualified class names in generated jsp files

+        to avoid naming conflicts with user imports. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46819">46819</a>: Remove redundant object instantiations in

+        JspRuntimeLibrary. Patch provided by Anthony Whitford. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve error message when EL identifiers are not valid Java identifiers

+        and use i18n for the error message. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50680">50680</a>: Prevent an NPE when using tag files from an exploded

+        JAR file, e.g. from within an IDE. Patch provided by Larry Isaacs.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.7_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50591">50591</a>: Fix NPE in ReplicationValve. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Internationalise the log messages for the FarmWarDeployer. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50600">50600</a>: Prevent a <code>ConcurrentModificationException</code>

+        when removing a WAR file via the FarmWarDeployer. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Be consistent with locks on sessionCreationTiming,

+        sessionExpirationTiming in DeltaManager.resetStatistics(). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50648">50648</a>: Correctly set the interrupt status if a thread using

+        <code>RpcChannel</code> is interrupted waiting for a message reply.

+        Based on a patch by Olivier Costet. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50646">50646</a>: Ensure larger Tribes messages are fully read. Patch

+        provided by Olivier Costet. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50679">50679</a>: Update the FarmWarDeployer to support parallel

+        deployment. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.7_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=22278">22278</a>: Add a commented out <code>RemoteAddrValve</code> that

+        limits access to the Manager and Host Manager applications to localhost.

+        Based on a patch by Yann C&eacute;bron. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a handful of Javadoc warnings. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide additional detail about how web application version order is

+        determined when using parallel deployment. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the documentation for the recoveryCount count attribute of the

+        the default cluster membership. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50441">50441</a>: Clarify when it is valid to set the docBase attribute

+        in a Context element. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50526">50526</a>: Provide additional documetation on configuring

+        JavaMail resources. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50599">50599</a>: Use correct names of roles required to access the 

+        Manager application. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.7 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.7_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Extend the Checkstyle tests to check for license headers. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Modify the build script so a release build always rebuilds the

+        dependencies to ensure that the correct Tomcat version appears in the

+        manifest. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Code clean-up to remove unused code and reduce IDE warnings. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50601">50601</a>: Code clean-up. Patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50606">50606</a>: Improve CGIServlet: Provide support for specifying

+        empty value for the <code>executable</code> init-param. Provide support

+        for explicit additional arguments for the executable. Those were

+        broken when implementing fix for bug <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49657">49657</a>. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)"><!--()--></a><a name="Tomcat_7.0.6_(markt)"><strong>Tomcat 7.0.6 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-01-14</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/General"><!--()--></a><a name="Tomcat_7.0.6_(markt)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.5. (mturk)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.6_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=8705">8705</a>: <code>org.apache.catalina.SessionListener</code> now

+        extends <code>java.util.EventListener</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=10526">10526</a>: Add an option to the <code>Authenticator</code>s to

+        force the creation of a session on authentication which may offer some

+        performance benefits. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=10972">10972</a>: Improve error message if the className attribute is

+        missing on an element in server.xml where it is required. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48692">48692</a>: Provide option to parse

+        <code>application/x-www-form-urlencoded</code> PUT requests. (schultz)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48822">48822</a>: Include context name in case of error while stopping

+        or starting a context during its reload. Patch provided by Marc 

+        Guillemot. (slaurent)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48837">48837</a>: Extend thread local memory leak detection to include

+        classes loaded by subordinate class loaders to the web

+        application's class loader such as the Jasper class loader. Based

+        on a patch by Sylvain Laurent. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48973">48973</a>: Avoid creating a SESSIONS.ser file when stopping an 

+        application if there's no session. Patch provided by Marc Guillemot.

+        (slaurent)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49000">49000</a>: No longer accept specification invalid name only

+        cookies by default. This behaviour can be restored using a system

+        property. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49159">49159</a>: Improve memory leak protection by renewing threads of

+        the pool when a web application is stopped. (slaurent)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49372">49372</a>: Re-fix after connector re-factoring. If connector

+        initialisation fails (e.g. if a port is alreasy in use) do not trigger

+        an <code>LifecycleException</code> for an invalid state transition.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49543">49543</a>: Allow Tomcat to use shared data sources with per

+        application credentials. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49650">49650</a>: Remove unnecessary entries package.access property

+        defined in catalina.properties. Patch provided by Owen Farrell. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50106">50106</a>: Correct several MBean descriptors. Patch provided by

+        Eiji Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Further performance improvements to session ID generation. Remove legacy

+        configuration options that are no longer required. Provide additional

+        options to control the <code>SecureRandom</code> instances used to

+        generate session IDs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50201">50201</a>: Update the access log reference in

+        <code>StandardEngine</code> when the ROOT web application is redeployed,

+        started, stopped or defaultHost is changed. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50282">50282</a>: Load

+        <code>javax.security.auth.login.Configuration</code> with

+        <code>JreMemoryLeakPreventionListener</code> to avoid memory leak when

+        stopping a web application that would use JAAS. (slaurent)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50351">50351</a>: Fix the regression that broke BeanFactory resources

+        caused by the previous fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50159">50159</a>. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50352">50352</a>: Ensure that <code>AsyncListener.onComplete()</code> is

+        fired when <code>AsyncContext.complete()</code> is called. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50358">50358</a>: Set the correct LifecycleState when stopping instances

+        of the deprecated Embedded class. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Further Lifecycle refactoring for Connectors and associated components.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct handling of versioned web applications in deployer. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct removal of <code>LifeCycleListener</code>s from

+        <code>Container</code>s via JMX. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't use <code>null</code>s to construct log messages. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Code clean-up. Replace use of inefficient constructors with more

+        efficient alternatives. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50411">50411</a>: Ensure sessions are removed from the

+        <code>Store</code> associated with a <code>PersistentManager</code>.

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50413">50413</a>: Ensure 304 responses are not returned when using

+        static files as error pages. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50448">50448</a>: Fix possible <code>IllegalStateException</code>

+        caused by recent session management refactoring. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure aliases settings for a context are retained after a context is

+        reloaded. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Log a warning if context.xml files define values for properties  that do

+        not exist (e.g. if there is a typo in a property name). (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50453">50453</a>: Correctly handle multiple <code>X-Forwarded-For</code>

+        headers in the RemoteIpFilter and RemoteIpValve. Patch provided by Jim

+        Riggs. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50541">50541</a>: Add support for setting the size limit and time limit

+        for LDAP seaches when using the JNDI Realm with <code>userSearch</code>.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        All configuration options that use regular expression now require a

+        single regular expression (using <code>java.util.regex</code>) rather

+        than a list of comma-separated or semi-colon-separated expressions.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50496">50496</a>: Bytes sent in the access log are now counted after

+        compression, chunking etc rather than before. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50550">50550</a>: When a new directory is created (e.g. via WebDAV)

+        ensure that a subsequent request for that directory does not result in a

+        404 response. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50554">50554</a>: Code clean up. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50556">50556</a>: Improve JreMemoryLeakPreventionListener to prevent

+        a potential class loader leak caused by a thread spawned when the class

+        <code>com.sun.jndi.ldap.LdapPoolManager</code> is initialized and the 

+        system property <code>com.sun.jndi.ldap.connect.pool.timeout</code> is 

+        set to a value greater than 0. (slaurent)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.6_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=47319">47319</a>: Return the client's IP address rather than null

+        for calls to <code>getRemoteHost()</code> when the APR connector is

+        used with <code>enableLookups="true"</code> but the IP address

+        is not resolveable. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50108">50108</a>: Add get/set methods for Connector property

+        minSpareThreads. Patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50360">50360</a>:  Provide an option to control when the socket

+        associated with a connector is bound. By default, the socket is bound on

+        <code>Connector.init()</code> and released on

+        <code>Connector.destroy()</code> as per the current behaviour but this

+        can be changed so that the socket is bound on

+        <code>Connector.start()</code> and released on

+        <code>Connector.stop()</code>. This fix also includes further Lifecycle

+        refactoring for Connectors and associated components. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove a huge memory leak in the NIO connector introduced by the fix

+        for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49884">49884</a>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50467">50467</a>: Protected against NPE triggered by a race condition

+        that causes the NIO poller to fail, preventing the processing of further

+        requests. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.6_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=13731">13731</a>: Make variables in <code>_jspService()</code> method

+        final where possible. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50408">50408</a>: Fix <code>NoSuchMethodException</code> when using

+        scoped variables with EL method invocation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50460">50460</a>: Avoid a memory leak caused by using a cached exception

+        instance in <code>JspDocumentParser</code> and

+        <code>ProxyDirContext</code>. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50500">50500</a>: Use correct coercions (as per the EL spec) for

+        arithmetic operations involving string values containing '.',

+        'e' or 'E'. Based on a patch by Brian Weisleder.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.6_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50185">50185</a>: Add additional trace level logging to Tribes to assist

+        with fault diagnosis. Based on a patch by Ariel. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't try and obtain session data from the cluster if the current

+        node is the only node in the cluster. Log requesting session data as

+        INFO rather than WARNING. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50503">50503</a>: When web application has a version, Engine level 

+        Clustering works correctly. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50547">50547</a>: Add time stamp for CHANGE_SESSION_ID message and 

+        SESSION_EXPIRED message. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.6_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=21157">21157</a>: Ensure cookies are written before the response is

+        commited in the Cookie example. Patch provided by Stefan Radzom. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50294">50294</a>: Add more information to documentation regarding format

+        of configuration files. Patch provided by Luke Meyer. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly validate provided context path so sessions for the ROOT web

+        application can be viewed through the HTML Manager. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve documentation of database connection factory. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50488">50488</a>: Update classpath required when using jsvc and add a

+        note regarding server VMs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Further filtering of Manager display output. (kkolinko) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.6 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.6_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't configure Windows installer to use PID file since it is not

+        removed when the service stops which prevents the service from starting.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=14416">14416</a>: Make <code>TagLibraryInfo.getTag()</code> more robust

+        at handling <code>null</code>s. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50552">50552</a>: Avoid NPE that hides error message when using Ant

+        tasks. (schultz)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide two alternative locations for the libraries downloaded from

+        the ASF web site at build time. Use the main distribution site as

+        default and the archive one as fallback. (kkolinko)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)"><!--()--></a><a name="Tomcat_7.0.5_(markt)"><strong>Tomcat 7.0.5 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2010-12-01</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/General"><!--()--></a><a name="Tomcat_7.0.5_(markt)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update to Apache Commons Daemon 1.0.4. (mturk)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.5_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=3839">3839</a>: Provide a mechanism to gracefully handle the case where

+        users book-mark the form login page or otherwise misuse the FORM

+        authentication process. Based on a suggestion by Mark Morris. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49180">49180</a>: Add option to disable log rotation in 

+        juli FileHandler. Patch provided by Pid (pidster at apache). (funkman)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49991">49991</a>: Ensure servlet request listeners are fired for

+        the login and error pages during FORM authentication. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50107">50107</a>: When removing a Host via JMX, do not attempt to

+        destroy the host's pipeline twice. Patch provided by Eiji

+        Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50138">50138</a>: Fix threading issues in

+        <code>org.apache.catalina.security.SecurityUtil</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50157">50157</a>: Ensure MapperListener is only added to a container

+        object once. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50159">50159</a>: Add a new attribute for <code>&lt;Resource&gt;</code>

+        elements, <code>singleton</code>, that controls whether or not a new

+        object is created every time a JNDI lookup is performed to obtain the

+        resource. The default value is <code>true</code>, which will return the

+        same instance of the resource in every JNDI lookup. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50168">50168</a>: Separate the <code>Lifecycle.DESTROY_EVENT</code> into

+        <code>Lifecycle.BEFORE_DESTROY_EVENT</code> and

+        <code>Lifecycle.AFTER_DESTROY_EVENT</code>. Use the additional state to

+        ensure that <code>Context</code> objects are only destroyed once.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50169">50169</a>: Ensure that when a Container is started that it

+        doesn't try and register with the mapper unless its parent has

+        already started. Patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50222">50222</a>: Modify memory leak prevention code so it pins the

+        system class loader in memory rather than than the common class loader,

+        which is better for embedded systems. Patch provided by Christopher

+        Schultz. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve debug logging for MapperListener registration. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Expose names of LifecycleListeners and ContainerListeners for

+        StandardContext via JMX. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add a new option, <code>resourceOnlyServlets</code>, to Context elements

+        that provides a mechanism for working around the issues caused by new

+        requirements for welcome file mapping introduced in Servlet 3.0. By

+        default, the existing Tomcat 6.0.x welcome file handling is used.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make Tomcat more tolerant of <code>null</code> when generating JMX names

+        for Valves. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make AccessLogValve attribute <code>enabled</code> changeable via JMX.

+        (pero)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct infinite loop if <code>ServletRequest.startAsync(ServletRequest,

+        ServletResponse)</code> was called. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50232">50232</a>: Remove dependency between StoreBase and

+        PersistentManager and associated code clean-up. Patch provided by

+        Tiago Batista. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50252">50252</a>: Prevent ClassCastException when using a

+        &lt;ResourceLink&gt;. Patch provided by Eiji Takahashi. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Reduce synchronization in session managers to improve performance of

+        session creation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        If starting children automatically when adding them to a container (e.g.

+        when adding a Context to a Host) don't lock the parent's set

+        of children whilst the new child is being started since this can block

+        other threads and cause issues such as lost cluster messages. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Implement support for parallel deployment. This allows multiple versions

+        of the same web application to be deployed to the same context path at

+        the same time. Users without a current session will be mapped to the

+        latest version of the web application. Users with a current session will

+        continue to use the version of the web application with which the

+        session is associated until the session expires. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50308">50308</a>: Allow asynchronous request processing to call

+        <code>AsyncContext.dispatch()</code> once the asynchronous request has

+        timed out. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make memory leak prevention code that clears ThreadLocal instances more

+        robust against objects with toString() methods that throw exceptions.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.5_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49860">49860</a>: Complete support for handling trailing headers in

+        chunked HTTP requests. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Impose a limit on the length of the trailing headers. The limit

+        is configurable with a system property and is <code>8192</code>

+        by default. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50207">50207</a>: Ensure Comet timeout events are triggered. This bug

+        was a regression triggered by the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49884">49884</a>. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.5_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49297">49297</a>: Enforce the rules in the JSP specification for parsing

+        the attributes of custom and standard actions that require that

+        the attribute names are unique within an element and that there is

+        whitespace before the attribute name. The whitespace test can be

+        disabled by setting the system property

+        <code>org.apache.jasper.compiler.Parser.STRICT_WHITESPACE</code> to

+        <code>false</code>. Attributes of the page directive have slightly

+        different rules. The implementation of that part of the fix is based on

+        a patch by genspring. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50105">50105</a>: When processing composite EL expressions use

+        <code>Enum.name()</code> rather than <code>Enum.toString()</code> as

+        required by the EL specification. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix minor thread-safety and performance issues in the implementation

+        of <code>maxLoadedJsps</code>. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for unloading JSPs that have not been requested for a

+        long time using the new parameter <code>jspIdleTimeout</code>. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add logging and JMX support to JSP unloading. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50192">50192</a>: Improve performance for EL when running under a

+        security manager. Based on a patch by Robert Goff. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50228">50228</a>: Improve recycling of <code>BodyContentImpl</code>.

+        This avoids keeping a cached reference to a webapp-provided Writer

+        used in JspFragment.invoke() calls. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50273">50273</a>: Provide a workaround for an HP-UX issue that can

+        result in large numbers of SEVERE log messages appearing in the logs as

+        a result of normal operation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50293">50293</a>: Increase the size of internal ELResolver array from 2 

+        to 8 since in typical usage there are at least 5 resolvers. Based on a

+        patch by Robert Goff. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.5_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add support for maxActiveSessions attribute to BackupManager. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve sending an access message in DeltaManager.

+        maxInactiveInterval of not Manager but the session is used. 

+        If maxInactiveInterval is negative, an access message is not sending. 

+        (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50183">50183</a>: BIO sender was not scheduling tasks to the executor

+        during normal operation. Patch provided by Ariel. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50184">50184</a>: Add an option to the RpcChannel to enable the Channel

+        send options to be set for the reply message. Based on a patch by Ariel.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that a new Context waiting for session data from other nodes in

+        the cluster does not block the processing of clustering messages for

+        other Contexts. (markt) 

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.5_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49426">49426</a>: Localize messages in the Manager application based on

+        the Locale of the user rather than the default Locale of the server.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Localize messages in the Host Manager application based on the Locale of

+        the user rather than the default Locale of the server. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50242">50242</a>: Provide a sample log4j  configuration that more

+        closely matches the default JULI configuration. Patch provided by

+        Christopher Schultz. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Restore the ability to edit the contents of /WEB-INF and /META-INF via

+        WebDAV via the provision of a new configuration option,

+        allowSpecialPaths. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct broken links for on-line JavaDocs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50230">50230</a>: Add new DistributedManager interface that is

+        implemented by the Backup Manager to remove circular dependency between

+        tomcat-catalina-ha and tomcat-catalina modules. Also allows third-party

+        distributed Manager implementations to report full session information

+        through the HTML Manager. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve Tomcat Logging documentation. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50303">50303</a>: Update JNDI how-to to reflect the new JavaMail

+        download location and that JAF is now included in Java SE 6. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix ordering functionality on sessions page for the HTML Manager 

+        application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix primary sessions not always being treated as such in the HTML

+        Manager application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix message not being displayed after session attribute removal in the

+        HTML Manager application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50310">50310</a>: Fix display of Servlet information in the Manager

+        application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        CVE-2010-4172: Multiple XSS in the Manager application. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50316">50316</a>: Fix display of negative values in the Manager 

+        application. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50318">50318</a>: Avoid NPE when trying to view session detail for an

+        expired session in the Manager application. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.5 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.5_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct a handful of Javadoc warnings. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=22965">22965</a>: Fix some typos and formatting issues in the global

+        web.xml file. Based on a patch by Yann C&eacute;bron. (markt) 

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Extend Checkstyle validation checks to check for unused imports. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        General code clean-up to reduce (not eliminate) the number of warnings

+        reported by IDEs. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50140">50140</a>: Don't ignore a user specified installation

+        directory when performing a silent install with the Windows installer on

+        64-bit platforms. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Reimplemented Windows installer dialogs, using modern libraries

+        (nsDialogs, MUI2). (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        When installing with the Windows installer on 64-bit platforms, allow

+        the user to select either a 32-bit JDK or a 64-bit JDK. If a 32-bit JDK

+        is selected, the 32-bit service wrapper and the 32-bit native DLL will

+        be installed. If a 64-bit JDK is selected, the 64-bit service wrapper

+        and the 64-bit native DLL will be installed. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Create Windows shortcuts for the Manager and Host Manager webapps.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Support /? command line option in the Windows Installer. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Display and allow to change roles for the Tomcat admin user in the

+        Windows installer. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        In the Windows installer: do not leave stale <code>server.xml</code>

+        and <code>tomcat-users.xml</code> fragments in the $TEMP folder.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49819">49819</a>: Redesign of home page by Pid (pidster at apache).

+        (timw)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.4 (markt)"><!--()--></a><a name="Tomcat_7.0.4_(markt)"><strong>Tomcat 7.0.4 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2010-10-21</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.4 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.4_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49428">49428</a>: Re-implement the fix for bug <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49428">49428</a> &ndash;

+        namespace issues for some Microsoft WebDAV clients. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49669">49669</a>: Fix memory leak triggered by using the deprecated

+        javax.security.auth.Policy class. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49922">49922</a>: Don't add filter twice to filter chain if the

+        filter matches more than one URL pattern and/or Servlet name. Patch

+        provided by heyoulin. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49937">49937</a>: Use an InstanceManager when creating an AsyncListener

+        through the AsyncContext to ensure annotations are processed. Based on a

+        patch by David Jencks. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        To avoid NoSuchMethodException, xmlValidation and xmlNamespaceAware are 

+        removed from the createStandardHost definition 

+        of mbeans-descriptors.xml. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49945">49945</a>: Continue improvements to JMX. Fix a handful of

+        attributes that were showing as Unavailable in JConsole. Patch provided

+        by Chamith Buddhika. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49952">49952</a>: Allow ServletContainerInitializers to add listeners to

+        a web application. Patch provided by David Jencks. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49956">49956</a>: Handle case when @Resource annotation uses the full

+        JNDI name for a resource. Based on a patch by Gurkan Erdogdu. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49557">49557</a>: Correct regression due to Lifecycle refactoring that

+        cleared all work directories (with compiled JSPs and persisted sessions)

+        when Tomcat was stopped. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49978">49978</a>: Correctly handle the case when a directory expected

+        to be created during web application start is already present. Rather

+        than throwing an exception and failing to start, allow the web

+        application to start normally. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49987">49987</a>: Fix thread safety issue with population of servlet

+        context initialization parameters. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49994">49994</a>: As per the Java EE 6 specification, return a new

+        object instance for each JNDI look up of a resource reference. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50015">50015</a>: Re-factor dynamic servlet security implementation to

+        make extensions, such as JACC implementations, simpler. Patch provided

+        by David Jencks. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50016">50016</a>: Re-factor <code>isUserInRole()</code> and

+        <code>login()/logout()</code> methods to support JACC implementations

+        and to improve encapsulation. Patch provided by David Jencks. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50017">50017</a>: Code clean-up. No functional change. Patch provided by

+        sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50027">50027</a>: Avoid NPE on start when a Context is defined in

+        server.xml with one or more JNDI resources. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50059">50059</a>: JARs should always be searched for static resources

+        even if the web application is marked as meta-data complete. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50063">50063</a>: Correct regression in fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50059">50059</a> that

+        causes applications marked as meta-data complete to return 404s for all

+        requests. Patch provided by heyoulin. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50087">50087</a>: Catch ClassFormatErrors when scanning for annotations.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.4 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.4_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49923">49923</a>: Avoid using negative timeouts during acceptor unlock

+        to ensure APR connector shuts down properly. (mturk) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49972">49972</a>: Fix potential thread safe issue when formatting dates

+        for use in HTTP headers. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50003">50003</a>: Set not maxThreads but minSpareThreads to

+        corePoolSize, if AbstractEndpoint.setMinSpareThreads is called.

+        (kfujino) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50044">50044</a>: Fix issue when using comet where socket remained in

+        long poll after the comet request has ended. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50054">50054</a>: Correctly handle the setting of minSpareThreads in 

+        AJP connector. (kfujino) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50072">50072</a>: Fix issues when using a non-blocking read for the

+        request line with the NIO connector that could result in the request

+        line being mis-read. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.4 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.4_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49986">49986</a>: Fix thread safety issue for JSP reload. (timw)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49998">49998</a>: Make jsp:root detection work with single quoted

+        attributes as well. (timw)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correctly handle the setting of primitive bean values via expression

+        language. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Don't swallow exceptions when processing TLD files and handle the

+        case when there is no web.xml file. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50066">50066</a>: Fix building of recursive tag files when the file

+        depends on a JAR file. Patch provided by Sylvain Laurent. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50078">50078</a>: Fix threading problem in EL caches. Patch provided by

+        Takayoshi Kimura. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Make EL cache sizes configurable. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.4 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.4_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Apply filters to default home page so copyright year is correctly

+        displayed. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.4 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.4_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48716">48716</a>: Do not call reset if the default LogManager is in use.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50013">50013</a>: Correctly package classes from

+        <code>org.apache.tomcat.util.file</code> and add the tomcat-util.jar to

+        the class path for the Ant tasks. Based on a patch provided by

+        Sylvain Laurent. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)"><!--()--></a><a name="Tomcat_7.0.3_(markt)"><strong>Tomcat 7.0.3 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48644">48644</a>: Review all instances of catching Throwable and

+        re-throw where appropriate. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Allow glob patterns in the <code>jarsToSkip</code> configuration and add

+        some debug logging to the jar scanner. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48738">48738</a>: Workaround a couple of long standing JDK bugs to

+        enable GZIP compressed output streams to be flushed. Based on a patch

+        provided by Jiong Wang. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48967">48967</a>: Replace strings "catalina.base" and "catalina.home"

+        by globally defined constants. Patch provided by Marc Guillemot. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49195">49195</a>: Don't report an error when shutting down a Windows

+        service for a Tomcat instance that has a disabled shutdown port. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49209">49209</a>: Prevent possible AccessControlException during

+        undeployment when running with a security manager. Patch provided by

+        Sylvain Laurent. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49657">49657</a>: Handle CGI executables with spaces in the path.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49667">49667</a>: Ensure that using the JDBC driver memory leak

+        prevention code does not cause a one of the memory leaks it is meant to

+        avoid. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49670">49670</a>: Restore SSO functionality that was broken by Lifecycle

+        refactoring. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49698">49698</a>: Allow a listener to complete an asynchronous request

+        if it times out. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49714">49714</a>: The annotation process of Jar doesn't influence

+        distributable element of web.xml. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49721">49721</a>: Alls JAR in a web application should be searched for

+        resources, not just those with a web-fragment.xml that is going to be

+        processed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49728">49728</a>: Improve PID file handling when another process is

+        managing the PID file and Tomcat does not have write access. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49730">49730</a>: Fix a race condition in StandardThreadExector that can

+        cause requests to experience large delays. Patch provided by Sylvain

+        Laurent. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49749">49749</a>: Single sign on cookies should have httpOnly flag set

+        using same rules as session cookies. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49750">49750</a>: Align <code>WebappClassLoader.validate()</code>

+        implementation with Javadoc and ensure that <code>javax.servlet.*</code>

+        classes can not be loaded by a <code>WebappClassLoader</code> instance.

+        Patch provided by pid. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49757">49757</a>: Correct some generics warnings. Based on a patch

+        provided by G&aacute;bor. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49779">49779</a>: Improve handling of POST requests and FORM

+        authentication, particularly when the user agent responds to the 302

+        response by repeating the POST request including a request body. Any

+        request body provided at this point is now swallowed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        CSRF prevention filter did not correctly handle URLs that used anchors.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix memory leak on web application stopped caused by failed to

+        de-register the web application's Servlets with the MBean server.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        More tweaks to the Lifecycle refactoring to ensure that when a component

+        is being destroyed, the destroy method is only called once on each

+        child component. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Keep the MBean names for web applications consistent between Tomcat 6

+        and Tomcat 7. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49856">49856</a>: Add an executorName attribute to Connectors so it is

+        possible to trace ThreadPool to Connector to Executor via the JMX

+        interface. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49865">49865</a>: Tomcat failed to start if catalina.properties was not

+        present. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49876">49876</a>: Fix the generics warnings in the copied Apache Jakarta

+        BCEL code. Based on a patch by G&aacute;bor. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49883">49883</a>: Ensure that the CombinedRealm and LockOutRealm return

+        a name for use in log messages rather than throwing an

+        <code>UnsupportedOperationException</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49884">49884</a>: Fix occassional NullPointerException on async

+        complete(). This resulted in a major refactoring of the async

+        implementation to address a number of threading issues. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update the version numbers in ServerInfo defaults to Tomcat 7.0.x.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49892">49892</a>: Correct JNDI name for method resource injections.

+        Based on a patch by Gurkan Erdogdu. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Ensure that Context elements defined in server.xml use any configClass

+        setting specified in the parent Host element. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        GSOC 2010. Enable the creation of Services, Engines, Connectors, Hosts

+        and Contexts via JMX from a minimal server.xml that contains only a

+        Server element. Based on a patch by Chamith Buddhika. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49909">49909</a>: Fix a regression introduced with the fix for

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=47950">47950</a> that prevented JSTL classes being loaded. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49915">49915</a>: Make error more obvious, particularly when accessed

+        via JConsole, if StandardServer.storeConfig() is called when there is

+        no StoreConfig implementation present. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50018">50018</a>: Fix some minor Javadoc errors in Jasper source.

+        Based on a patch by sebb. (timw)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50021">50021</a>: Correct a regression in the fix for <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46844">46844</a>

+        that may have caused additional problems during a failure at start up.

+        (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50026">50026</a>: Prevent serving of resources from WEB-INF and

+        META-INF directories when DefaultServlet or WebdavServlet is mapped

+        to a sub-path of the context. This changes DefaultServlet to always

+        serve resources with paths relative to the root of the context

+        regardless of where it is mapped, which is a breaking change for

+        current servlet-mappings that map the default servlet to a subpath.

+        (timw)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=50689">50689</a>: Provide 100 Continue responses at appropriate points

+        during FORM authentication if client indicates that they are expected.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Wait for the connectors to exit before closing them down. (mturk)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Follow up to <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48545">48545</a>. Make JSSE connectors more tolerant of a

+        incorrect trust store password. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix some edge cases in the NIO connector when handling requests that are

+        not received all at the same time and the socket needs to be returned to

+        the poller. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Further work to reduce the code duplication in the HTTP connectors.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make sure acceptor threads are stopped when the connector is stopped.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Make sure async timeout thread is stopped when the connector is stopped.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49625">49625</a>: Ensure Vary header is set if response may be

+        compressed rather than only setting it if it is compressed. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49802">49802</a>: Re-factor connector pause, stop and destroy methods so

+        that calling any of those methods has the expected results. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Various refactorings to reduce code duplication and unnecessary code in

+        the connectors. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49860">49860</a>: Add partial support for trailing headers in chunked

+        HTTP requests. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49665">49665</a>: Provide better information including JSP file name and

+        location when a missing file is detected during TLD handling. Patch

+        provided by Ted Leung. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49726">49726</a>: Specifying a default content type via a JSP property

+        group should not prevent a page from setting some other content type.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49799">49799</a>: The new <code>omit</code> attribute for

+        <code>jsp:attribute</code> elements now supports the use of expressions

+        and expression language. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49916">49916</a>: Switch to using an initialisation parameter to pass

+        JSP file information from Catalina to Jasper. This simplifies the

+        Catalina code as well as making it easier for Geronimo and others to

+        integrate Jasper. Patch provided by David Jencks. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49985">49985</a>: Fix thread safety issue in EL parser. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove domainReplication attribute from ClusterManager.

+        If you send session to only same domain, use DomainFilterInterceptor.

+        (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add Null check when CHANGE_SESSION_ID message received. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Add support for LAST_ACCESS_AT_START system property to DeltaSession.

+        (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid a NPE in the DeltaManager when a parallel request invalidates the

+        session before the current request has a chance to send the replication

+        message. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49905">49905</a>: Prevent memory leak when using asynchronous session

+        replication. (markt) 

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49924">49924</a>: When non-primary node changes into a primary node,

+        make sure isPrimarySession is changed to true. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the class name of the default JAR scanner in the documentation

+        web application. (rjung)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49585">49585</a>: Update JSVC documentation to reflect new packaging

+        of Commons Daemon. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the Servlet, JSP and EL Javadoc links to link to the

+        specifications and the relevant part of the Java EE 6 Javadoc. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Update a few places in the docs where the Manager documentation referred

+        to the old role name of manager rather than than the new manager-script.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Extras"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Extras"><strong>Extras</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49861">49861</a>: Don't log RMI ports formatted with commas for the

+        JMX remote listener. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.3 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.3_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the user names created by the Windows installer for the Manager

+        and Host Manager applications. (mturk)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct the Eclipse compiler dependency in the Jasper POM. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Extend Checkstyle validation checks to check import order. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49758">49758</a>: Fix generics warnings exposed by a fix in Eclipse 3.6.

+        Patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Apache Commons Pool to 1.5.5. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49955">49955</a>: Improvement and correction of Building Tomcat guide.

+        Based on a patch from Wesley Acheson. (timw)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.2 (markt)"><!--()--></a><a name="Tomcat_7.0.2_(markt)"><strong>Tomcat 7.0.2 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2010-08-11</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.2 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.2_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Fix regression that prevented running with a security manager enabled.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.2 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.2_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct Javadoc errors. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide Javadoc for Servlet 3.0 API, JSP 2.2 API and EL 2.2 API.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Remove second copy of RUNNING.txt from the full-docs distribution. Some

+        unpacking utilities can't handle multiple copies of a file with the same

+        name in a directory. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.2 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.2_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Extend Checkstyle validation checks to check for tabs in nearly all text

+        files. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Apache Commons Daemon from 1.0.2 to 1.0.3. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Eclipse JDT Core Batch Compiler (ecj.jar) from 3.5.1 to 3.6.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.1 (markt)"><!--()--></a><a name="Tomcat_7.0.1_(markt)"><strong>Tomcat 7.0.1 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.1 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.1_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        GSOC 2010. Continue work to align MBean descriptors with reality. Patch

+        provided by Chamith Buddhika. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When running under a security manager, enforce package access and

+        package definition restrictions defined in the catalina.properties file.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        When using a Loader configured with

+        <code>searchExternalFirst="true"</code> failure to find the

+        class in an external repository should not prevent searching of the

+        local repositories. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add entryPoint support to the CSRF prevention filter. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48297">48297</a>: Correctly initialise handler chain for web services

+        resources. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48960">48960</a>: Add a new option to the SSI Servlet and SSI Filter to

+        allow the disabling of the <code>exec</code> command. This is now

+        disabled by default. Based on a patch by Yair Lenga. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48998">48998</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49617">49617</a>: Add the ExpiresFilter, a port of the

+        httpd mod_expires module. Patch provided by Cyrille Le Clerc. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49030">49030</a>: When initializing/starting/stopping connectors and

+        one of them fails, do not ignore the others. (markt/kkolinko)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49128">49128</a>: Don't swallow exceptions unnecessarily in

+        <code>WebappClassLoader.start()</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49182">49182</a>: Align comments in setclasspath.[sh|bat] with

+        behaviour. Based on a patch provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49230">49230</a>: Enhance JRE leak prevention listener with protection

+        for the keep-alive thread started by

+        <code>sun.net.www.http.HttpClient</code>. Based on a patch provided by

+        Rob Kooper. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49414">49414</a>: When reporting threads that may have triggered a

+        memory leak on web application stop, attempt to differentiate between

+        request processing threads and threads started by the application.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49428">49428</a>: Add a work-around for the known namespace issues for

+        some Microsoft WebDAV clients. Patch provided by Panagiotis Astithas.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for <code>*.jar</code> pattern in VirtualWebappLoader.

+        (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Use a LockOutRealm in the default configuration to prevent attempts to

+        guess user passwords by brute-force. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49478">49478</a>: Add support for user specified character sets to the

+        <code>AddDefaultCharsetFilter</code>. Based on a patch by Felix

+        Schumacher. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49503">49503</a>: Make sure connectors bind to their associated ports

+        sufficiently early to allow jsvc and the

+        org.apache.catalina.startup.EXIT_ON_INIT_FAILURE system property to

+        operate correctly. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49525">49525</a>: Ensure cookies for the ROOT context have a path of /

+        rather than an empty string. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49528">49528</a>, <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49567">49567</a>: Ensure that

+        <code>AsyncContext.isAsyncStarted()</code> returns the correct value

+        after <code>AsyncContext.start()</code> and that if

+        <code>AsyncContext.complete()</code> is called on a separate thread that

+        it is handled correctly. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49530">49530</a>: Contexts and Servlets not stopped when Tomcat is shut

+        down. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49536">49536</a>: If no ROOT context is deployed, ensure a 404 rather

+        than a 200 is returned for requests that don't map to any other context.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Additional debug logging in StandardContext to provide information on

+        Manager selection. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49550">49550</a>: Supress deprecation warning where deprecated code is

+        required to be used. No functional change. Patch provided by Sebb.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49551">49551</a>: Allow default context.xml location to be specified

+        using an absolute path. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve logging of unhandled exceptions in servlets by including the

+        path of the context where the error occurred. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Include session ID in error message logged when trying to set an

+        attribute on an invalid session. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Improve the CSRF protection filter by using SecureRandom rather than

+        Random to generate nonces. Also make the implementation class used user

+        configurable. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Avoid NullPointerException, when copyXML=true and META-INF/context.xml

+        does not exist. (kfujino)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49598">49598</a>: When session is changed and the session cookie is

+        replaced, ensure that the new Set-Cookie header overwrites the old

+        Set-Cookie header. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Create a thread to trigger asynchronous timeouts when using the BIO

+        connector, change the default timeout to 10s (was infinite) and make the

+        default timeout configurable using the <code>asyncTimeout</code>

+        attribute on the connector. (pero/markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49600">49600</a>: Make exceptions returned by the

+        <code>ProxyDirContext</code> consistent for resources that weren't found

+        by checking the <code>DirContext</code> or the cache. Test case based on

+        a patch provided by Marc Guillemot. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49613">49613</a>: Improve performance when using SSL for applications

+        that make multiple class to <code>Request.getAttributeNames()</code>.

+        Patch provided by Sampo Savolainen. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Handle the edge cases where resources packaged in JARs have names that

+        start with a single quote character or a double quote character. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct copy and paste typo in web.xml parsing rules that mixed up

+        <code>local-ejb-ref</code> and <code>resource-env-ref</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Refactor session managers to remove unused code and to reduce code

+        duplication. Also, all session managers used for session replication now

+        extend <code>org.apache.catalina.ha.session.ClusterManagerBase</code>.

+        (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.1 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.1_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Remove references to Jikes since it does not support Java 6. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct over zealous type checking for EL in attributes that broke the

+        use of JSF converters. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Correct algorithm used to identify correct method to use when a

+        MethodExpressions is used in EL. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49217">49217</a>: Ensure that identifiers used in EL meet the

+        requirements of the Java Language Specification. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Improve logging of JSP exceptions by including JSP snippet (if enabled)

+        rather than just the root cause in the host log. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49555">49555</a>: Correctly handled Tag Libraries where functions are

+        defined in static inner classes. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.1 (markt)/Cluster"><!--()--></a><a name="Tomcat_7.0.1_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49127">49127</a>: Don't swallow exceptions unnecessarily in

+        <code>SimpleTcpReplicationManager.startInternal()</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49407">49407</a>: Change the BackupManager so it is consistent with

+        DeltaManager and reports both primary and backup sessions when active

+        sessions are requested. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49445">49445</a>: When session ID is changed after authentication,

+        ensure the DeltaManager replicates the change in ID to the other nodes

+        in the cluster. (kfujino)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.1 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.1_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49112">49112</a>: Update the ROOT web application's index page. Patch

+        provided by pid. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49213">49213</a>: Add the permissions necessary to enable the Manager

+        application to operate currently when running with a security manager.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49436">49436</a>: Correct documented default for readonly attribute of

+        the UserDatabase component. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49475">49475</a>: Use new role name for manager application access on

+        the ROOT web application's index page. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49476">49476</a>: CSRF protection was preventing access to the session

+        expiration features. Also switch the manager application to the generic

+        CSRF protection filter. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Better handle failure to create directories required for new hosts in

+        the Host Manager application. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Switch the Host Manager application to the generic CSRF protection for

+        the HTML interface and prevent started hosts from being started and

+        stopped hosts from being stopped. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49518">49518</a>: Fix typo in extras documentation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49522">49522</a>: Fix regression due to change of name for MBeans for

+        naming resources that broke the complete server status page in the

+        manager application. Note these MBeans now have a new name. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49570">49570</a>: When using the example compression filter, set the

+        Vary header on compressed responses. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add redirects for the root of the manager and host-manager web

+        applications that redirect users to the html interface rather than

+        returning a 404. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide the HTML Manager application with the ability to differentiate

+        between primary, backup and proxy sessions. Note that proxy sessions are

+        only shown if enabled in web.xml. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.1 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.1_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49130">49130</a>: Better describe the core package in the Windows

+        installer, making it clear that the service will be installed. Patch

+        provided by sebb. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Re-factor unit tests to enable them to be run once with each of the HTTP

+        connector implementations (BIO, NIO and APR/native). (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=49268">49268</a>: Add the necessary plumbing to include CheckStyle in

+        the build process. Start with no checks. Additional checks will be

+        added as they are agreed. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Updated to Ant 1.8.1. The build now requires a minimum of Ant 1.8.x.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the re-packaged version of commons-fileupload from 1.2.1 to

+        1.2.2. The layout of re-packaged version was also restored to the

+        original commons-fileupload layout to make merging of future updates

+        easier. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update the re-packaged version of Jakarta BCEL from trunk revision

+        880760 to trunk revision 978831. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)"><!--()--></a><a name="Tomcat_7.0.0_(markt)"><strong>Tomcat 7.0.0 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2010-06-29</strong></font></td></tr><tr><td colspan="2"><blockquote>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)/Catalina"><!--()--></a><a name="Tomcat_7.0.0_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update Servlet support to the Servlet 3.0 specification. (all)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Improve and document VirtualWebappLoader. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=43642">43642</a>: Add prestartminSpareThreads attribute for Executor.

+        (jfclere)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Switch from AnnotationProcessor to InstanceManager. Patch provided by

+        David Jecks with modifications by Remy. (remm/fhanik)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=620845">r620845</a> and <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=669119">r669119</a>. Make shutdown address

+        configurable. (jfclere)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=651977">r651977</a> Add some missing control checks to

+        <code>ThreadWithAttributes</code>. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=677640">r677640</a> Add a startup class that does not require any

+        configuration files. (costin)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=700532">r700532</a> Log if temporary file operations within the CGI

+        servlet fail. Make sure header Reader is closed on failure. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=708541">r708541</a> Delete references to DefaultContext which was removed

+        in 6.0.x. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=709018">r709018</a> Initial implementation of an asynchronous file handler

+        for JULI. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Give session thisAccessedTime and lastAccessedTime clear semantics.

+        (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Expose thisAccessedTime via Session interface. (rjung)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Provide a log format for JULI that provides the same information as the

+        default but on a single line. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=723889">r723889</a> Provide the ability to configure the Executor job

+        queue size and a timeout for adding jobs to the queue. (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for aliases to StandardContext. This allows content from

+        other directories and/or WAR files to be mapped to paths within the

+        context. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Provide clearer definition of Lifecycle interface, particularly start

+        and stop, and align components that implement Lifecycle with this

+        definition. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48662">48662</a>: Provide a new option to control the copying of context

+        XML descriptors from web applications to the host's xmlBase. Copying of

+        XML descriptors is now disabled by default. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Move comet classes from the org.apache.catalina package to the

+        org.apache.catalina.comet package to allow comet to work under a

+        security manager. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)/Coyote"><!--()--></a><a name="Tomcat_7.0.0_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Port SSLInsecureRenegotiation from mod_ssl. This requires

+        to use tomcat-native 1.2.21 that have option to detect this

+        support from OpenSSL library. (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Allow bigger AJP packets also for request bodies and responses

+        using the packetSize attribute of the Connector. (rjung)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td><a href="http://svn.apache.org/viewvc?view=rev&amp;rev=703017">r703017</a> Make Java socket options consistent between NIO

+        and JIO connector. Expose all the socket options available on

+        <code>java.net.Socket</code> (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=46051">46051</a>: The writer returned by <code>getWriter()</code> now

+        conforms to the <code>PrintWriter</code> specification and uses platform

+        dependent line endings rather than always using <code>\r\n</code>.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Use tc-native 1.2.x which is based on APR 1.3.3+ (mturk)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=724239">r724239</a> NIO connector now always uses an Executor. (fhanik)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=724393">r724393</a> Implement keepAliveCount for NIO connector in a thread

+        safe manner. (fhanik)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=724849">r724849</a> Implement keep alive timeout for NIO connector.

+        (fhanik)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)/Jasper"><!--()--></a><a name="Tomcat_7.0.0_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update JSP support to the JSP 2.2 specification. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Update EL support to the EL 2.2 specification. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=787978">r787978</a> Use "1.6" as the default value for compilerSourceVM

+        and compilerTargetVM options of Jasper. (kkolinko)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48358">48358</a>: Add support for limiting the number of JSPs that are

+        loaded at any one time. Based on a patch by Isabel Drost. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        <a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=48689">48689</a>: Access TLD files through a new JarResource interface

+        to make extending Jasper simpler, particularly in OSGi environments.

+        Patch provided by Jarek Gawor. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="High Availability"><!--()--></a><a name="High_Availability"><strong>High Availability</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add support for UDP and secure communication to tribes. (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add versioning to the tribes communication protocol to support future

+        developments. (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Add a demo on how to use the payload. (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        Started to add JMX support to the cluster implementation. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=609778">r609778</a> Minor fixes to the throughput interceptor and the

+        NIO receiver. (fhanik)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=630234">r630234</a> Additional checks for the NIO receiver. (fhanik)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=671650">r671650</a> Improve error message when multicast is not enabled.

+        (fhanik)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)/Web applications"><!--()--></a><a name="Tomcat_7.0.0_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>

+     <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        <a href="http://svn.apache.org/viewvc?view=rev&amp;rev=631321">r631321</a> Update changelog to support the &lt;rev&gt; element

+        in the documentation. (fhanik)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        A number of additional roles were added to the Manager and Host Manager

+        applications to separate out permissions for the HTML interface, the

+        text interface and the JMX proxy. (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        CSRF protection was added to the Manager and Host Manager applications.

+        (markt)

+      </td></tr>

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        List array elements in the JMX proxy output of the Manager application.

+        (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)/Extras"><!--()--></a><a name="Tomcat_7.0.0_(markt)/Extras"><strong>Extras</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>

+        A new JmxRemoteLifecycleListener that can be used to fix the ports used

+        for remote JMX connections, eg when using JConsole. (markt)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 7.0.0 (markt)/Other"><!--()--></a><a name="Tomcat_7.0.0_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>

+    <table border="0" cellpadding="2" cellspacing="2">

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        Numerous code clean-up changes including the use of generics and

+        removing unused imports, fields, parameters and methods. (markt)

+      </td></tr>

+      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>

+        All deprecated internal code has been removed. <b>Warning:</b> If you

+        have custom components for a previous Tomcat version that extend

+        internal Tomcat classes and override deprecated methods it is highly

+        likely that they will no longer work. (markt)

+      </td></tr>

+      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>

+        Parameterize version number throughout build scripts and source. (rjung)

+      </td></tr>

+    </table>

+  </blockquote></td></tr></table>

+</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr noshade size="1"></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font color="#525D76" size="-1"><em>

+        Copyright &copy; 1999-2013, Apache Software Foundation

+        </em></font></div></td></tr></table></body></html>
\ No newline at end of file