You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Roe, Jennifer L" <RO...@nationwide.com> on 2023/03/13 19:18:12 UTC
Tomcat 9.0.72 and New Relic APM java agent issues
We are using 9.0.73 Tomcat version and New Relic APM java agent 7.11.0, it seems we are missing the injected New Relic script and the DOM looks much different than in 9.0.71. Looks as though it's incorrectly escaping certain html tags as if they're text (EG: changing < to "/>")
In our application login page is not fully displayed and we see the following at the bottom:
This field is required.", }, "j_password": { required: "This field is required.", }, }, showErrors: function (errorMap, errorList) { var numOfInvalids = this.numberOfInvalids(); if (numOfInvalids != 0) { $("#loginErrorSummary").html("
Version 9.0.72 is when this was first noticed, nothing seemed to change with .73 and the New Relic version has remained the same 7.11.0.
We have run a test with New Relic 8.01 agent with the same results
System details:
Ubuntu 20.04.5 LTS
OpenJDK Runtime Environment Temurin-17.0.6+10
Example of where it seems to be doing an incorrect escape on the html produced from our .jsp
Working page 9.0.71
<form id="loginForm" name="LoginForm" action="spring_security_check" method="post" novalidate="novalidate">
<input type="hidden" name="redirectUri" value="">
<div class="container page-container">
<div class="page-content">
<div class="row">
<div class="col-sm-8 col-lg-6">
Not working 9.0.73
<form id="loginForm" name="LoginForm" action="spring_security_check" method="post">
"/>
Thanks
[Nationwide is on your side.]
Jennifer Roe
Consultant, Technology Engineer
Proud Nationwide Member
Middleware Technology
roej4@nationwide.com
FORTUNE(r) and Time Inc. are not affiliated with, and do not endorse the products or services of, Nationwide Mutual Insurance Company.
Re: Tomcat 9.0.72 and New Relic APM java agent issues
Posted by Mark Thomas <ma...@apache.org>.
On 17/03/2023 14:02, Roe, Jennifer L wrote:
> Hi,
>
> We have opened a case with New Relic. The behavior exists with the
> 7.11.1 and 8.0.1 java agents per multiple applications teams. [The
> behavior was first noticed with Tomcat 9.0.72; Tomcat 9.0.73 which was
> released shortly after 9.0.72 also experiences this behavior.]
>
> The app teams stated disabling the java agent allows the application
> to function as expected. However, without the agent our observability
> and monitoring of the applications takes a hit as metrics are not available.
>
> Could this be related to fix 66441?
>
> Fix:66441 <https://bz.apache.org/bugzilla/show_bug.cgi?id=66441>: Make
> imports of static fields in JSPs visible to any EL expressions used on
> the page. (markt)
On one hand that is one of only two code changes (the other changes for
formatting and/or comments) in the org.apache.jasper packages between
9.0.71 and 9.0.72 so it seems possible. On the other hand, I'm
struggling to see how either of those code changes could cause the sort
of corruption being observed.
I'm be interested in hearing New Relic's explanation for this.
Mark
>
> Regards,
>
> Joel
>
> Nationwide is on your side.
>
>
>
> *Jennifer Roe*
>
> Consultant, Technology Engineer
>
> Proud Nationwide Member
>
> Middleware Technology
>
> roej4@nationwide.com
>
> /FORTUNE® and Time Inc. are not affiliated with, and do not endorse the
> products or services of, Nationwide Mutual Insurance Company./
>
> *From:* Thomas Meyer <th...@m3y3r.de>
> *Sent:* Friday, March 17, 2023 9:27 AM
> *To:* Tomcat Users List <us...@tomcat.apache.org>; Roe, Jennifer L
> <RO...@nationwide.com>
> *Cc:* Whitesel, Joel M <WH...@nationwide.com>; Adcock, Troy Allen
> <tr...@nationwide.com>; Abbott, William H (Bill)
> <bi...@nationwide.com>
> *Subject:* [EXTERNAL] Re: Tomcat 9.0.72 and New Relic APM java agent issues
>
> *Nationwide Information Security Warning: **This is an
> **EXTERNAL****email. *Use *CAUTION****before clicking on links, opening
> attachments, or responding.*(*Sender:*thomas@m3y3r.de
> <ma...@m3y3r.de>)
>
> ------------------------------------------------------------------------
>
> Hi,
>
> We may see something similar with tomcat 9.0.73 and jsp pages.
>
> Need to test with newrelic app disabled.
>
> Did you already create a case with newrelic with this problem?
>
> Mfg
> Thomas
>
> Am 13. März 2023 20:18:12 MEZ schrieb "Roe, Jennifer L"
> <ROEJ4@nationwide.com <ma...@nationwide.com>>:
>
> We are using 9.0.73 Tomcat version and New Relic APM java agent
> 7.11.0, it seems we are missing the injected New Relic script and
> the DOM looks much different than in 9.0.71. Looks as though it's
> incorrectly escaping certain html tags as if they're text (EG:
> changing < to "/>")
>
> In our application login page is not fully displayed and we see the
> following at the bottom:
>
> This field is required.", }, "j_password": { required: "This field
> is required.", }, }, showErrors: function (errorMap, errorList) {
> var numOfInvalids = this.numberOfInvalids(); if (numOfInvalids != 0)
> { $("#loginErrorSummary").html("
>
> Version 9.0.72 is when this was first noticed, nothing seemed to
> change with .73 and the New Relic version has remained the same 7.11.0.
>
> We have run a test with New Relic 8.01 agent with the same results
>
> System details:
>
> Ubuntu 20.04.5 LTS
>
> OpenJDK Runtime Environment Temurin-17.0.6+10
>
> Example of where it seems to be doing an incorrect escape on the
> html produced from our .jsp
>
> Working page 9.0.71
>
> <form id="loginForm" name="LoginForm" action="spring_security_check"
> method="post" novalidate="novalidate">
>
> <input type="hidden" name="redirectUri" value="">
>
> <div class="container page-container">
>
> <div class="page-content">
>
> <div class="row">
>
> <div class="col-sm-8 col-lg-6">
>
> Not working 9.0.73
>
> <form id="loginForm" name="LoginForm" action="spring_security_check"
> method="post">
>
> "/>
>
> Thanks
>
> Nationwide is on your side.
>
>
>
> *Jennifer Roe*
>
> Consultant, Technology Engineer
>
> Proud Nationwide Member
>
> Middleware Technology
>
> roej4@nationwide.com <ma...@nationwide.com>
>
> /FORTUNE® and Time Inc. are not affiliated with, and do not endorse
> the products or services of, Nationwide Mutual Insurance Company./
>
> --
> Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Re: Tomcat 9.0.72 and New Relic APM java agent issues
Posted by "Roe, Jennifer L" <RO...@nationwide.com>.
Hi,
We have opened a case with New Relic. The behavior exists with the 7.11.1 and 8.0.1 java agents per multiple applications teams. [The behavior was first noticed with Tomcat 9.0.72; Tomcat 9.0.73 which was released shortly after 9.0.72 also experiences this behavior.]
The app teams stated disabling the java agent allows the application to function as expected. However, without the agent our observability and monitoring of the applications takes a hit as metrics are not available.
Could this be related to fix 66441?
[Fix:] 66441<https://bz.apache.org/bugzilla/show_bug.cgi?id=66441>: Make imports of static fields in JSPs visible to any EL expressions used on the page. (markt)
Regards,
Joel
[Nationwide is on your side.]
Jennifer Roe
Consultant, Technology Engineer
Proud Nationwide Member
Middleware Technology
roej4@nationwide.com
FORTUNE® and Time Inc. are not affiliated with, and do not endorse the products or services of, Nationwide Mutual Insurance Company.
From: Thomas Meyer <th...@m3y3r.de>
Sent: Friday, March 17, 2023 9:27 AM
To: Tomcat Users List <us...@tomcat.apache.org>; Roe, Jennifer L <RO...@nationwide.com>
Cc: Whitesel, Joel M <WH...@nationwide.com>; Adcock, Troy Allen <tr...@nationwide.com>; Abbott, William H (Bill) <bi...@nationwide.com>
Subject: [EXTERNAL] Re: Tomcat 9.0.72 and New Relic APM java agent issues
Nationwide Information Security Warning: This is an EXTERNAL email. Use CAUTION before clicking on links, opening attachments, or responding. (Sender: thomas@m3y3r.de<ma...@m3y3r.de>)
________________________________
Hi,
We may see something similar with tomcat 9.0.73 and jsp pages.
Need to test with newrelic app disabled.
Did you already create a case with newrelic with this problem?
Mfg
Thomas
Am 13. März 2023 20:18:12 MEZ schrieb "Roe, Jennifer L" <RO...@nationwide.com>>:
We are using 9.0.73 Tomcat version and New Relic APM java agent 7.11.0, it seems we are missing the injected New Relic script and the DOM looks much different than in 9.0.71. Looks as though it's incorrectly escaping certain html tags as if they're text (EG: changing < to "/>")
In our application login page is not fully displayed and we see the following at the bottom:
This field is required.", }, "j_password": { required: "This field is required.", }, }, showErrors: function (errorMap, errorList) { var numOfInvalids = this.numberOfInvalids(); if (numOfInvalids != 0) { $("#loginErrorSummary").html("
Version 9.0.72 is when this was first noticed, nothing seemed to change with .73 and the New Relic version has remained the same 7.11.0.
We have run a test with New Relic 8.01 agent with the same results
System details:
Ubuntu 20.04.5 LTS
OpenJDK Runtime Environment Temurin-17.0.6+10
Example of where it seems to be doing an incorrect escape on the html produced from our .jsp
Working page 9.0.71
<form id="loginForm" name="LoginForm" action="spring_security_check" method="post" novalidate="novalidate">
<input type="hidden" name="redirectUri" value="">
<div class="container page-container">
<div class="page-content">
<div class="row">
<div class="col-sm-8 col-lg-6">
Not working 9.0.73
<form id="loginForm" name="LoginForm" action="spring_security_check" method="post">
"/>
Thanks
[Nationwide is on your side.]
Jennifer Roe
Consultant, Technology Engineer
Proud Nationwide Member
Middleware Technology
roej4@nationwide.com<ma...@nationwide.com>
FORTUNE® and Time Inc. are not affiliated with, and do not endorse the products or services of, Nationwide Mutual Insurance Company.
--
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.
Re: Systemd file and umask for tomcat
Posted by Simon Matter <si...@invoca.ch>.
> Hello,
> today I was struggling with the umask on ubuntu and tomcat.
>
> The normal way to do it in systemd is:
>
> [Service]
> UMask=0022
>
> Unfortunately, this didn’t work and it took me a while to figure out, that
> Catalina.sh
> is overwriting the umask with 0027 if no env-variable was set.
> So for tomcat, I needed to set:
> Environment='UMASK=0022'
>
> Is there any reason, why tomcat has some unexpected logic which overrides
> the systemd settings?
I think Tomcat uses its own way to do things so that it can do it in all
platforms in the same way. Outside of Linux, nobody is using systemd
anyway :)
Therefore I have this in setenv.sh
# Umask for system reserved uid/gid
if [ -z "$UMASK" ]; then
UMASK="0022"
fi
Regards,
Simon
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Systemd file and umask for tomcat
Posted by "Thomas Hoffmann (Speed4Trade GmbH)" <Th...@speed4trade.com.INVALID>.
Hello,
today I was struggling with the umask on ubuntu and tomcat.
The normal way to do it in systemd is:
[Service]
UMask=0022
Unfortunately, this didn’t work and it took me a while to figure out, that Catalina.sh
is overwriting the umask with 0027 if no env-variable was set.
So for tomcat, I needed to set:
Environment='UMASK=0022'
Is there any reason, why tomcat has some unexpected logic which overrides the systemd settings?
Thanks! Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Tomcat 9.0.72 and New Relic APM java agent issues
Posted by Thomas Meyer <th...@m3y3r.de>.
Hi,
We may see something similar with tomcat 9.0.73 and jsp pages.
Need to test with newrelic app disabled.
Did you already create a case with newrelic with this problem?
Mfg
Thomas
Am 13. März 2023 20:18:12 MEZ schrieb "Roe, Jennifer L" <RO...@nationwide.com>:
>We are using 9.0.73 Tomcat version and New Relic APM java agent 7.11.0, it seems we are missing the injected New Relic script and the DOM looks much different than in 9.0.71. Looks as though it's incorrectly escaping certain html tags as if they're text (EG: changing < to "/>")
>
>In our application login page is not fully displayed and we see the following at the bottom:
>This field is required.", }, "j_password": { required: "This field is required.", }, }, showErrors: function (errorMap, errorList) { var numOfInvalids = this.numberOfInvalids(); if (numOfInvalids != 0) { $("#loginErrorSummary").html("
>
>Version 9.0.72 is when this was first noticed, nothing seemed to change with .73 and the New Relic version has remained the same 7.11.0.
>We have run a test with New Relic 8.01 agent with the same results
>
>System details:
>Ubuntu 20.04.5 LTS
>OpenJDK Runtime Environment Temurin-17.0.6+10
>
>Example of where it seems to be doing an incorrect escape on the html produced from our .jsp
>
>Working page 9.0.71
><form id="loginForm" name="LoginForm" action="spring_security_check" method="post" novalidate="novalidate">
> <input type="hidden" name="redirectUri" value="">
> <div class="container page-container">
> <div class="page-content">
> <div class="row">
> <div class="col-sm-8 col-lg-6">
>
>
>Not working 9.0.73
><form id="loginForm" name="LoginForm" action="spring_security_check" method="post">
> "/>
>
>
>Thanks
>
>
>[Nationwide is on your side.]
>Jennifer Roe
>Consultant, Technology Engineer
>Proud Nationwide Member
>Middleware Technology
>roej4@nationwide.com
>FORTUNE(r) and Time Inc. are not affiliated with, and do not endorse the products or services of, Nationwide Mutual Insurance Company.
>
>
--
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.