January 2023 - Webobjects-dev

Re: Replacing log4j with slf4j in Wonder
by Ricardo Parada via Webobjects-dev 31 Jan '23

31 Jan '23

site_archiver(a)lists.apple.com Delivered-To: webobjects-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mac.com; s=1a1hai; t=1675179749; bh=TLfF75rs0zL8PuVvJi6d5j7xlSJKivODfF0xWUl9GVs=; h=Content-Type:From:Mime-Version:Subject:Date:Message-Id:To; b=SdtWP8lh/SeCH0Hf+fIHRjYRkcGLI0dRsAS4VNIx8+Kuj5ICtBQDJMBfa2K9ON07X r9pp1PyWbtAwo8WSh0jOLS5VonOK86w6vdBsCc3YiecMy3whT2YGDjAJY26YcLMJcj o241xOH3Hojq00l3b3mRRlk+3roaqcU+yw9cIlL16EYlDQBPJZYBSLaYuRkUOdRp7W rrrD55DL4UttD2xJBDeudPtxdLKguZT1uPS6VI4JqhAGqqu32IbR5zuiLfW6VQXkyW Mo3VdwkYUmTqqkKf4Ym2ArSyC9sTQDAhRAECEdamgZaiFXfAW0gbHY4FI8NOaGNfJm IFuLLbor3TaDg== _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

HTTP/2 Support
by Michael Kondratov via Webobjects-dev 29 Jan '23

29 Jan '23

site_archiver(a)lists.apple.com Delivered-To: webobjects-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= aspireauctions.com; h=x-mailer:date:date:message-id:subject :subject:mime-version:content-transfer-encoding:content-type :content-type:from:from:received:received; s=mail; t=1675010167; x=1677602168; bh=7bPmFJEjGSxVdaWKc2pH5hV5sN+6M4VkzVakHBrr6cE=; b= oRKAlHNYBRRbFXYmZG/jxmqWJzhz0v1sWCWvy6OsVhdpK1scMfoxnv9zxGGGfVXm FmOJs1/uA3h/tvHFgdcKPWXauig+T5ujrE6f8d4x7K2lG7cXBjIH1OuICuk4lAPK Tr6eUXNhepRpv6k8tkaulSCuxel8dIinDCS7WZNeENA= Hello everyone! As far as I understand the standard Apache module is only compatible the mod_prefork configuration. Would it ever be possible to adopt the WO Adaptor to work with HTTP/2 standards? Michael Kondratov _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Replacing log4j with slf4j in Wonder
by René Bock via Webobjects-dev 27 Jan '23

27 Jan '23

site_archiver(a)lists.apple.com Delivered-To: webobjects-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salient-doremus.de; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HD8Z6I3EVppOUrEbSmgSWnhHLMur0BVNSXbnYLFNh5E=; b=HmkPuRPznhcgAORgymuu8dw1a/1XsYMPW8DrN91WkU2CnDG418IoIhT3VlNcVrRWm9rJ4X6Z5TNAGoGZd1Le9/+wBUlNFFJ/OlMn9+XHhS17enfGuwAEsNYrxUjvbkvnEU0nLe3ETwKsHTmGkWZBFuPUTBCxQ2fOJ58Taj33MjVW3ZLrZK8/BnxUQT0oQGr9MteKCA5Tl3eVSwgVBxnAfa6XtMnUyAv30uyOuWeVxt7rXb+CYavr0T/8V3tli13chzYrJRhn6b1lTuqtWiO/LxrRKADYjkm6oJA9DPu0Jn7xjxBzGgsTnKnYWpjaA92fBx/MhAH+ZMfU3H1khq8sfg== Thread-index: AQHYLpD+WhL+69ABeU+HE90cWV3jPK6zBjkAgAD5RIA= Thread-topic: Replacing log4j with slf4j in Wonder Hi, I successfully merged Henriques PR into our Wonder-fork and we are using log4j2 now for our current projects. But in order to get rid of the log4j1.jar, we had to move form ant to maven build. And kick out the JavaXML.framework. I'll like to support Henrique in finalising this PR, but unfortunately, I got no reply from him :-( Regards, René Am 26.01.2023 um 19:11 schrieb Ricardo Parada via Webobjects-dev <webobjects-dev(a)lists.apple.com<mailto:webobjects-dev@lists.apple.com>>: Hi Henrique, It is true that Wonder uses mostly the Apache commons logging library, e.g. org.apache.commons.logging and a little bit of the log4j 1 library, e.g. org.apache.log4j. That is what I concluded b searching *.jar and *.java files in Wonder. And you mention it in your list of open issues on your pull request, e.g. open issue # 2.8 I do not see Wonder using log4j 2, e.g. org.apache.logging.log4j. So I think technically, it is not affected by vulnerabilities CVE-2021-44228 and CVE-2021-45046 which I’ve been asked to address in our code base. I am interested in your pull request [1]. I took a look at it and I see you have a couple issues left to resolve. For instance, updating five classes that currently extend log4j1 classes. Any progress on that? Do you see this being merged to Wonder anytime soon? Will you wait until the 3 open issues have all been resolved? Is anybody else using it and/or helping you? I’m thinking of applying your pull request to our version of Wonder to see how well it works with our code base. Using slf4j in Wonder and letting the developer choose the actual logging library seems like a winning strategy to me. Thank you, Ricardo Parada [1] https://github.com/wocommunity/wonder/pull/977 On Mar 2, 2022, at 6:55 PM, Henrique Prange via Webobjects-dev <webobjects-dev(a)lists.apple.com<mailto:webobjects-dev@lists.apple.com>> wrote: Hey guys! I'm replacing the log4j dependency with slf4j in Wonder, as promised. I've created a draft pull request [1] on GitHub so more people can comment, test, and assist me with this change. Please, take a look at it if you have time. Your comments are always welcome. Cheers, HP [1]https://github.com/wocommunity/wonder/pull/977 _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com<mailto:Webobjects-dev@lists.apple.com>) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/rparada%40mac.com This email sent to rparada(a)mac.com<mailto:rparada@mac.com> _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com<mailto:Webobjects-dev@lists.apple.com>) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/bock%40salient-dorem… This email sent to bock(a)salient-doremus.de _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Replacing log4j with slf4j in Wonder
by Ricardo Parada via Webobjects-dev 26 Jan '23

26 Jan '23

site_archiver(a)lists.apple.com Delivered-To: webobjects-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mac.com; s=1a1hai; t=1674756719; bh=y3GBL/olQzw5r7pgZf8gQH7ZeYjTw8/V7vBmYoyR/y4=; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:To; b=bndRqrxbn+Up55XV0VkCHALuP/nvunj4EB5LHi+H2/x3sQzrNoeEJnLxgxqCxtSaU EnoKegjFnwWUTwBtktIVlCYvU9a2JW9F7e0L8gjvvCmJ5JzaWWDiUWQLHhLfS8cFHC R9Wn7pYsuo1J5jfTUrp88Y5ghZS0o4cP7qa1p4jvE4p1/6KHeOkPe04oOg5UHn0otp U7ln544Sgy/K94C6QaGrDPGwRcD9h1iReEz+Tmy6uP1pYPbjbZkJDri4V0umNCBjlc zWWVeKg9q1mpCaHfEwsF+hPd9E2TVfD+dP2qvkD9LdXpe06KujKUmWnRUH713kbnZC D7pAXLE7tPeqA== Hi Henrique, It is true that Wonder uses mostly the Apache commons logging library, e.g. org.apache.commons.logging and a little bit of the log4j 1 library, e.g. org.apache.log4j. That is what I concluded b searching *.jar and *.java files in Wonder. And you mention it in your list of open issues on your pull request, e.g. open issue # 2.8 I do not see Wonder using log4j 2, e.g. org.apache.logging.log4j. So I think technically, it is not affected by vulnerabilities CVE-2021-44228 and CVE-2021-45046 which I’ve been asked to address in our code base. I am interested in your pull request [1]. I took a look at it and I see you have a couple issues left to resolve. For instance, updating five classes that currently extend log4j1 classes. Any progress on that? Do you see this being merged to Wonder anytime soon? Will you wait until the 3 open issues have all been resolved? Is anybody else using it and/or helping you? I’m thinking of applying your pull request to our version of Wonder to see how well it works with our code base. Using slf4j in Wonder and letting the developer choose the actual logging library seems like a winning strategy to me. Thank you, Ricardo Parada [1] https://github.com/wocommunity/wonder/pull/977 <https://github.com/wocommunity/wonder/pull/977> > On Mar 2, 2022, at 6:55 PM, Henrique Prange via Webobjects-dev > <webobjects-dev(a)lists.apple.com> wrote: > > Hey guys! > > I'm replacing the log4j dependency with slf4j in Wonder, as promised. I've > created a draft pull request [1] on GitHub so more people can comment, test, > and assist me with this change. Please, take a look at it if you have time. > Your comments are always welcome. > > Cheers, > > HP > > [1]https://github.com/wocommunity/wonder/pull/977 > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/webobjects-dev/rparada%40mac.com > > This email sent to rparada(a)mac.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0