This entry lists Ed's picks for the brand new JavaLand conference.
It used to be that Sunday was a fairly relaxing day for most. Not anymore! This year, Sunday is already overcrowded with many more events and sessions than one can possibly attend, as the JavaOne 2013 Content Catalog Sunday entries demonstrate. Sunday's activity can be divided into four categories...
In last week was born the SouJavaLivre in Brazil, its main objective is disseminating and help to envolve the java free and the OpenJDK in country. For does that there are some sub-projects:
Support to Adopt OpenJDK : With list in Portuguese also some tutorial in Portuguese to help the people to adopt the JVM's reference, but helping and with integration...
This brief blog entry explains the Mojarra bug triage process, and
shares some tips for maximizing the chances your bug will be quickly
fixed and find its way into a release.
Servlet 3.1 Specification (JSR 340) is almost ready for the release. One of the new features is the support for protocol upgrade.
HTTP protocol upgrade was introduced in HTTP 1.1 (RFC 2616):
The Upgrade general-header allows the client to specify what additional communication protocols it supports and would like to use if the server finds it appropriate to switch protocols. The server MUST use...
Based on the results of the last-completed Java.net poll, this year's JavaOne in San Francisco, CA is going to be a huge success. Of course, Java.net polls aren't scientific, but it's still surprising when developers overwhelmingly select a single option in a poll. A total of 2146 votes were cast...
Servlet 3.1 Specification (JSR 340) and Java Authorization Contract for Containers (JSR 115) MR3 are almost ready for release. Besides "*", the role-name "**" is introduced in the above two specifications.
In a nutshell, "*" means any role defined in web.xml and "**" means any authenticated user.
Prior to Servlet 3.1, web containers use proprietary mechanisms to add security-constraints for any...
Servlet 3.1 Specification (JSR 340) is almost ready for the release. Several new security features have been added in this version of Servlet specification.
In this blog, I will explain one of the security features, namely deny-uncovered-http-methods.
Let us take a look at a simple security-constraint in web.xml as follows:
<web-app xmlns="http://www.w3.org/2001/XMLSchema" ...
Servlet 3.1 was in Public Review in Janurary 2013. And it is in Proposed Final Draft now. Most of the new features are related to security.
In this following, I will highlight features since Servlet 3.1 Public Review:
add new API javax.servlet.http.Part#getSubmittedFileName
add new API javax.servlet.ServletContext#getVirtualServerNameThis API allows a JASPIC module to be registered in a Servlet...