You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by kk...@apache.org on 2014/09/27 01:47:36 UTC
svn commit: r1627911 - in /tomcat/trunk/webapps/docs: changelog.xml
config/cookie-processor.xml
Author: kkolinko
Date: Fri Sep 26 23:47:36 2014
New Revision: 1627911
URL: http://svn.apache.org/r1627911
Log:
Add work-in-progress warning to CookieProcessor document.
I am not quite satisfied with my wording, but it is better than nothing.
Mention this new configuration option in changelog.
Modified:
tomcat/trunk/webapps/docs/changelog.xml
tomcat/trunk/webapps/docs/config/cookie-processor.xml
Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1627911&r1=1627910&r2=1627911&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Fri Sep 26 23:47:36 2014
@@ -56,6 +56,13 @@
<bug>57016</bug>: When using the <code>PersistentValve</code> do not
remove sessions from the store when persisting them. (markt)
</fix>
+ <add>
+ Introduce new configuration element CookieProcessor in Context to allow
+ context-specific configuration of cookie processing options. Attributes
+ of Context element that were added in Tomcat 8.0.13 to allow
+ configuration of a new experimental RFC6265 based cookie parser are
+ replaced by this new configuration element. (markt)
+ </add>
</changelog>
</subsection>
<subsection name="Web applications">
@@ -123,7 +130,7 @@
<add>
Add an additional implementation of a RFC6265 based cookie parser along
with new Context options to select and configure it. This parser is
- currently considered experiemental and is not used by default. (markt)
+ currently considered experimental and is not used by default. (markt)
</add>
<fix>
Fixed the multipart elements merge operation performed during web
Modified: tomcat/trunk/webapps/docs/config/cookie-processor.xml
URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/cookie-processor.xml?rev=1627911&r1=1627910&r2=1627911&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/config/cookie-processor.xml (original)
+++ tomcat/trunk/webapps/docs/config/cookie-processor.xml Fri Sep 26 23:47:36 2014
@@ -45,6 +45,34 @@
<a href="context.html">Context</a> component. If it is not included, a default
implementation will be created automatically.</p>
+ <p><strong>Note:</strong> <strong>CookieProcessor</strong> is a new
+ configuration element, introduced in Tomcat 8.0.15.
+ <strong>This is work in progress.</strong>
+ The goal is to review the current implementation of HTTP Cookie headers
+ processing in Tomcat to provide better compliance with RFC6265 specification.
+ The ideas are summarized on a
+ <a href="https://wiki.apache.org/tomcat/Cookies">Wiki page</a> and discussed
+ on <a href="http://tomcat.apache.org/lists.html">mailing lists</a>.
+ Notable points:</p>
+
+ <ul>
+ <li><strong>CookieProcessor</strong> element allows to configure cookie
+ parsing separately in each web application, or globally in the default
+ <code>conf/context.xml</code> file. The legacy cookie parsing algorithm
+ supported only limited global configuration via several
+ <a href="systemprops.html#Specifications">system properties</a>. Those
+ system properties are still supported, but are going to be deprecated in
+ favor of this new configuration element.
+ </li>
+ <li>The new RFC6265-compliant (<em>work in progress</em>) implementation
+ is a stand-in replacement for the original legacy one. Until the new code
+ is stabilized, the legacy implementation remains the default one.
+ You can select the implementation by setting <code>className</code>
+ attribute on <strong>CookieProcessor</strong> element.</li>
+ <li>This is work in progress. Configuration attributes may change in a
+ future release.</li>
+ </ul>
+
</section>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org