[ANN] Apache Tomcat 7.0.67 released

[Violeta Georgieva <vi...@apache.org>]

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 7.0.67.

Apache Tomcat is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Expression Language and Java
WebSocket technologies.

This release contains a number of bug fixes and improvements compared to
version 7.0.65. The notable changes since 7.0.65 include:


- Allow file based configuration resources (e.g. key stores) to be
configured
  using URLs.

- Add an option to control (per context) quoting of EL expressions in JSP
  attributes. Restore the default behavior in Jasper to align with 7.0.64
and
  earlier as well as other JSP implementations.

- Add a new RestCsrfPreventionFilter that provides basic CSRF protection for
  REST APIs.

- Use instance manager for WebSocket server endpoint instances.

- Location headers for redirects now use relative URIs. This can be
controlled
  per Context with the useRelativeRedirects attribute.


Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

Note: This version has 4 zip binaries: a generic one and
          three bundled with Tomcat native binaries for Windows operating
          systems running on different CPU architectures.

Note: Use of the Java WebSocket 1.1 implementation requires Java 7.

Note: If you use the APR/native AJP or HTTP connector you *must* upgrade
          to version 1.1.33 or later of the APR/native library.

Downloads:
http://tomcat.apache.org/download-70.cgi

Migration guides from Apache Tomcat 5.5.x and 6.0.x:
http://tomcat.apache.org/migration.html

Enjoy

The Apache Tomcat team