Supported
- Supports tomcat 7.0.15+, 8 (any), 8.5 (any), and 9 (any)
- Based on Spring 4.3 and Spring Security 4.2
- Using 'hazendaz' fork of displaytag (maintenance mode)
- Vulnerability Free libraries used
New Features
- Supports copying single file into deployed context
- Log display for Slf4j requires 1.7.21+, error will be noted in logs but other logs will display. Due to breaking change in slf4j library that couldn't be avoided.
- Better logging around secure functions
- Added dbcp2 support
- SingleThreadModel supported on both older tomcat releases and latest
- Silk images are all now PNG now. This covers quite a few images but we still have considerable gif images.
- Utf-8 used by default throughout code where not otherwise previously defined
Breaking Change
- Users using '/logs/index.htm' will need to use either '/logs' or '/logs/list.htm'
Corrections
- Corrected session expiry link
- Corrected problems with images that reached 2.4.0.SP1 but was missed on prior 3.0.0.M3
- Removed tomcat 5.5 mentions
- More complete language support
- Prevention of unexpected session creation
- Quartz jobs now listed as psi probe
- Security enhancements, stack trace will no longer be shown on webpage but rather in logs only
- Some XSS corrections
- Removed legacy java 1.4 checks
- File are all closed after usage now
- And lots and lots of TLC on codebase
Known Possible Issues
- Spring 4.3 resulted in a number of 405/POST errors. 405 / POST errors still in codebase at this release. Some have already since been fixed on master. If you find any please confirm not on master before raising issue. All of these will be resolved before final 3.0.0 is released.