tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <>
Subject Re: [SECURITY] Tomcat 7 ignores @ServletSecurity annotations
Date Fri, 04 Mar 2011 15:21:31 GMT
On 03/03/2011 09:05, Mark Thomas wrote:
> Based on what I have seen so far it looks to be a valid issue. I have a
> very rough patch that addresses the bulk of the problem but there is
> some unexpected behaviour still to be resolved. Today's task is writing
> some unit tests, getting my head around exactly what needs to be done
> and refining the patch.
> I'd like to make statement regarding time-scales but the last time I hit
> what on the surface looked like a simple bug it took a month of
> refactoring to fix it. I don't think this is going to take anywhere near
> that long but until the full extent of the required changes is
> understood, it would be foolish to speculate about time-scales.

I believe this is now fixed. I'm running the unit tests now followed by
the Servlet TCK. Assuming everything passes, I'll start the 7.0.10
release process later today.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message