You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Ray Holme <ra...@yahoo.com.INVALID> on 2017/11/06 13:49:55 UTC
taglibs
So according to Mark, taglibs must NOT be listed in the catalina.properties file under tomcat.util.scan.StandardJarScanFilter.jarsToSkip
Mark informed us that the below jstl... jars are both taglibs: (jstl-api-1.2.jar & jstl-impl-1.2.jar)
Sooo - how do we determine if a jar we want to add is a taglib?
Re: taglibs
Posted by Ray Holme <ra...@yahoo.com.INVALID>.
OK, so I tried that and found one library needs to be excluded (from the exclusion list) - i.e. scanned
# ls jstl*; grep ".tld" jstl-*
jstl-api-1.2.jar jstl-impl-1.2.jar
Binary file jstl-impl-1.2.jar matches
So if your rule works, I need jstl-impl to be scanned, but jstl-api could be excluded.
Nice! Thanks.
Ray
On Monday, November 6, 2017 10:54 AM, Mark H. Wood <mw...@iupui.edu> wrote:
On Mon, Nov 06, 2017 at 10:13:42AM -0500, Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Ray,
>
> On 11/6/17 9:48 AM, Ray Holme wrote:
> > I am not the primary developer. I do Java and DB development. I
> > leave the JSP for someone else (I am mostly retired but I have
> > been doing this a LONG time).> But I deal with distributions and
> > builds so I was the one who modified the "not to SCAN"
> > libraries.2.5 minutes down to less than 1 second.
> Fast and broken is worse than slow and working. :)
>
> > But I blew it with the jstl jars so I just wanted to know if there
> > is any way to find out if the jar is a taglib.
> So... generally speaking I would say "you should know your own
> libraries" but it shouldn't be hard to determine which libraries are
> taglibs. Simply look in each JAR file to see if there are any ".tld"
> files.
That's what I thought, too. I looked, and the jstl-api JAR doesn't
contain any TLDs. The corresponding jstl-impl JAR does, though.
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu
Re: taglibs
Posted by "Mark H. Wood" <mw...@iupui.edu>.
On Mon, Nov 06, 2017 at 10:13:42AM -0500, Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Ray,
>
> On 11/6/17 9:48 AM, Ray Holme wrote:
> > I am not the primary developer. I do Java and DB development. I
> > leave the JSP for someone else (I am mostly retired but I have
> > been doing this a LONG time).> But I deal with distributions and
> > builds so I was the one who modified the "not to SCAN"
> > libraries.2.5 minutes down to less than 1 second.
> Fast and broken is worse than slow and working. :)
>
> > But I blew it with the jstl jars so I just wanted to know if there
> > is any way to find out if the jar is a taglib.
> So... generally speaking I would say "you should know your own
> libraries" but it shouldn't be hard to determine which libraries are
> taglibs. Simply look in each JAR file to see if there are any ".tld"
> files.
That's what I thought, too. I looked, and the jstl-api JAR doesn't
contain any TLDs. The corresponding jstl-impl JAR does, though.
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu
Re: taglibs
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Ray,
On 11/6/17 9:48 AM, Ray Holme wrote:
> I am not the primary developer. I do Java and DB development. I
> leave the JSP for someone else (I am mostly retired but I have
> been doing this a LONG time).> But I deal with distributions and
> builds so I was the one who modified the "not to SCAN"
> libraries.2.5 minutes down to less than 1 second.
Fast and broken is worse than slow and working. :)
> But I blew it with the jstl jars so I just wanted to know if there
> is any way to find out if the jar is a taglib.
So... generally speaking I would say "you should know your own
libraries" but it shouldn't be hard to determine which libraries are
taglibs. Simply look in each JAR file to see if there are any ".tld"
files.
Some libraries include tag libraries that your application doesn't
care about, though, and you may be able to skip JAR scanning for those
JARs if you know enough about their use by your application.
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAloAfCYACgkQHPApP6U8
pFg/Rw//d7uXPFuCTucg9E9zGbb4mvO9pfvz+s8YLg81Z5l9b+sDvyWGpYsT9lLg
OuOqoX7jJBR2fkwKZ2xaicviuHN+u+GHTHbJjkktf+U7yv6VUNo6ZOnZBeCQOLjV
XFMXsxZl6q5o5Gn5jFBVjykqZUZSxlL98lDFJuzm7ut3wtqB/CD0ttGsHsXXBq+u
fC4jJUYzYltRR0oYw161fwRfWQ/EqFtYObZCohTvVtByO5Vh3aKHyg8s7cRqLV+7
dz/qhwmXGEvWPiQrNjcZcUEBxXymYOSCspXtX/BaWJH5vL/I78CrjgrjzzrHpz9O
w77TlYxgDe5vgRxItrHUv3Omn4QKEYTzxUKrsUpRIghquDg7UL9VqD0bSKi6Njfb
5rX+00Btt4EbRGaqfNFpDNOfbDZat8Ktk6Og6Me/SbZi/AFQrggoc+CFDSjKvHeJ
B3B8OWjexnzvaZiJ3RybO3wuPDF63Z3Sqx1JVL6JVVYi4USFj0Nf8kXGL7PcZjHu
VdxA/spAKEojzDB6vxquO5FL4VwI2T+r+4nzkp5cnFtcPj79L+B30p1Q9HGmvAQD
4i3ez+u1Hh36Wf8oovMj3v3dzesEE459kpM3Yag44vs6y6CGtuHglDArJt7BC08D
4YrQdT9r+c/pnzeV+lOTivD0vfvUdRcklJVNYQ+6jJ/n/UkCjl0=
=NUyW
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: taglibs
Posted by Ray Holme <ra...@yahoo.com.INVALID>.
Chris,
I am not the primary developer. I do Java and DB development.
I leave the JSP for someone else (I am mostly retired but I have been doing this a LONG time).
But I deal with distributions and builds so I was the one who modified the "not to SCAN" libraries.2.5 minutes down to less than 1 second.But I blew it with the jstl jars so I just wanted to know if there is any way to find out if the jar is a taglib.
I don't think we use Maven.
On Monday, November 6, 2017 9:05 AM, Christopher Schultz <ch...@christopherschultz.net> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Ray,
On 11/6/17 8:49 AM, Ray Holme wrote:
> So according to Mark, taglibs must NOT be listed in the
> catalina.properties file under
> tomcat.util.scan.StandardJarScanFilter.jarsToSkip Mark informed us
> that the below jstl... jars are both taglibs: (jstl-api-1.2.jar &
> jstl-impl-1.2.jar)
>
> Sooo - how do we determine if a jar we want to add is a taglib?
Umm... if you use a library, don't you know what it does?
Oh, maybe you are in Maven hell where you download the whole internet
in order to build/deploy your application. #sorrynotsorry
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=I6Qf
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: taglibs
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Ray,
On 11/6/17 8:49 AM, Ray Holme wrote:
> So according to Mark, taglibs must NOT be listed in the
> catalina.properties file under
> tomcat.util.scan.StandardJarScanFilter.jarsToSkip Mark informed us
> that the below jstl... jars are both taglibs: (jstl-api-1.2.jar &
> jstl-impl-1.2.jar)
>
> Sooo - how do we determine if a jar we want to add is a taglib?
Umm... if you use a library, don't you know what it does?
Oh, maybe you are in Maven hell where you download the whole internet
in order to build/deploy your application. #sorrynotsorry
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAloAbC0ACgkQHPApP6U8
pFgSqBAAyz9yTAKGE2RSyZRUwW7wUcinYV7NwqQ+7E1kC7hy2E9tCyC9E+AGiTr7
GuJHUb+yJ4UP1vKjQ2SO+Cffmxbyz1PsfMOMhO6abDJQVOj3aHbIjUw70GlS5w+7
10l8Pe39fl+5GQQHLAye/XZgGv7dNVmITFmGAfonN+1gHi5L3Kio1VaYfn/7W+vx
KvYK7DbnmcdiANDBPS9g2/pdKlxYj4frA13QOEKnwStjWrSquEuXji4RsC2iYedl
+IyGq5IVVXZ1vGEBItfQverdZrqtbkDYu3UKiJ6rFkJiI6tf56ERE+lLQYbIsDbU
Mg2gV72PlQU/CUdqb5rqDjZLVk6FfKg18DysE0ywvRY0r7dsZugiED7y2438a9kJ
EHzbZdGyNmJbT1hW4p52wyrwR/AHgKriSRsupgw4xaVQfLAFOYEv0revg9fmPr1R
BoZWu2xoqVViUgnTV4TmV/zJsezogOstK6AEL03zTc1No+Jha+yzMTl0TE7efAf9
7ACHZ02XwtidSH33QwxpyoRafxjYMF5/D/3c0GJWlwTL8dc9zlnIFFyZclWv14Vw
DeNavGVyulP5aytl30VIS+wb2N1pUdMbeGCiD1jipomtITnKI9YjUsesj0Lu7c43
C/GRx5OLBCgM5bpTjFn2KR8Yd8D5TgUoE4KYDeONaopu2Tf1rPs=
=I6Qf
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org