<document>
<header>
<title>Resin Change Log</title>
</header>
<body>

<s1 title="Resin Change Log">

<ul>
<li><a href="http://caucho.com/resin-3.1/changes/changes.xtp">Resin 3.1 changes</a></li>
</ul>

<s2 title="4.0.26 - Feb 29, 2012">
<ul>
<li>cli: added config-undeploy command</li>
<li>pdf-report: added option to save reports locally</li>
<li>debian: changed default Resin Daemon user and group to www-data</li>
<li>xa: change timeout message to include EXTRA_TIMEOUT (#4927, rep by Shinomiya Nobuaki)</li>
<li>config: tiered *.xml files belong in ${tier}-inf/*.xml and ${tier}-inf/*.jar (#4952)</li>
<li>watchdog: improve error message when &lt;user-name> is an invalid user (#4942)</li>
<li>web-server: HttpProxy needs to query DNS on timeout to pick up changes (#4903, rep by B. Plump)</li>
<li>kernel: split CurrentTime from Alarm for embedded applications (#4889)</li>
<li>watchdog: add allow-non-reserved-ip as a &lt;server> argument for private networks (#4941, rep by georgbuschbeck)</li>
<li>http: added sendfile() for large files</li>
<li>watchdog: Resin pwd is set to root-directory (#4928, rep by Trung Nguyen)</li>
<li>mod_caucho: send resolved IP address for cluster (#4945)</li>
<li>thread: update threading architecture</li>
<li>cli: password-generate issue with --user (#4938)</li>
<li>websocket/hessian: websocket frame must be read fully on hessian end (#4943)</li>
<li>jcache: cache annotations (@CacheResult, @CachePut)</li>
<li>websocket: debug threaddump not removed (#bhauer, #4940)</li>
</ul>
</s2>

<s2 title="4.0.25 - Jan 24, 2012">
<ul>
<li>cache: validate/remove corrupted blob rows (#4919, rep by Keith Fetterman)</li>
<li>cache: remove corrupted database on restart (#4919, rep by Keith Fetterman)</li>
<li>servlet: add form-parameter-max (default 10000) to limit form parameters (#4912, rep by georgbuschbeck)</li>
<li>install: make install target fails to compare directories on Solaris (#4917, rep by Leonid Kaminksy)</li>
<li>install: ./configure fails to link conftest on Solaris (#4916, rep by Leonid Kaminksy)</li>
<li>async: comet memory retention of HttpResponse needs unlink (#4907, rep by Richard Mccluskey)</li>
<li>config: rvar app-0.http when read in watchdog needs current server-id (#4900)</li>
<li>config:  ${foo} now uses rvar search path automatically</li>
<li>cli: add $HOME/.resin and --mode</li>
<li>cli: add config-cat and config-ls for debugging</li>
<li>websocket: pass autobahn test suite</li>
<li>config: added $disable_compiling_loader to properties (#4787, rep by systhemes)</li>
<li>cli: made web-app-deploy, web-app-restart, etc. primary cli (#4885)</li>
<li>servlet: web-app root url /foo now automatically redirects to /foo/ (#4884)</li>
<li>config: add password-encrypt and &lt;resin:Password> (#4810, Leonid Kaminsky)</li>
<li>health: stat gathering limited to 14 days for baseline (#4893)</li>
<li>config: server should start but not serve pages for certain config errors (#4891)</li>
<li>config: cluster merging, used by local.d (#4882)</li>
<li>http: add &lt;tcp-keepalive> to enable TCP keepalive for a socket (#4886, rep by Hal Hildebrand)</li>
<li>cdi: interceptor and InterceptorBinding with enum array (#4883, rep by andreaskaltenbach)</li>
<li>health: add expire-timeout to LogService (#4848, rep by C. Moran)</li>
<li>health: HealthSystem event as a classloader context (#4861)</li>
<li>cache: timing in mmap file extension could truncate (#4854, rep by georgbuschbeck)</li>
<li>config: rvar should work like an EL var lookup (#4879)</li>
<li>debian: change /var/www ownership to 'resin' for rpm consistency</li>
<li>cli/deploy: deploy with --address when local machine has resinctl (#4868)</li>
<li>jsp: pageContext.errorData.throwable could grab the wrong exception attribute (#4874, rep by mate)</li>
<li>cli: update/normalization of usage messages</li>
<li>jstl: validation of JSTL fast-mode c:if, etc. (#4866)</li>
<li>vhosts: host-alias-regexp needs to have implicit anchors for the pattern (#4859, rep by Rick Mann)</li>
<li>server: NPE on getUserPrincipal() (#4862, rep by wtao)</li>
</ul>
</s2>

<s2 title="4.0.24 - Nov 17, 2011">
<ul>
<li>servlet: session creation with enable-cookies=false (#4775, rep by jkeays)</li>
<li>quercus: isset returning true for null values in compiled mode (Wordpress fix) (#4477, rep by mhixson)</li>
<li>health pdf: mailto config should be mail-to (rep by Keith Fetterman)</li>
<li>security: custom constraints could not be added to resin:security-constraint (#4835, rep by K. Ding)</li>
<li>cli: new "license-add" command</li>
<li>config: added rvar() method to properties-based config</li>
<li>access-log: use Alarm.getExactTime() for '%D' formatting in access log (#4842, rep by William Au)</li>
<li>servlet: transport constraint priority(#4843, rep by Keith Fetterman)</li>
<li>ssl: jsse self-signed certificates are only possible with Sun/Oracle JDK (#4829)</li>
<li>el: added "?:" operator ("x ?: 80" is "x != null ? x : 80")</li>
<li>iis: add suport for windows authentiation(#4826, rep by Urs Kehrli)</li>
<li>centos: update ./configure for centos (#4803)</li>
<li>servlet: fixed bug failing @MultipartConfig when used with resin:Forward(#4777)</li>
<li>config: add resin:properties</li>
<li>cli: "restart" command needs to handle dynamic servers (#4801)</li>
<li>jsp-el: CompositeELResolver wasn't implementing invoke properly (#4820, rep by Wesley Wu)</li>
<li>websocket: WebSocketReader.read(char[]) was using iso-8859-1 instead of utf-8 (#4818, rep by ihristov)</li>
<li>hessian: add setUnshared and HessianUnshared for serialization performance</li>
<li>health: added LicenseHealthCheck</li>
<li>health pdf: added license info to PDF report</li>
<li>health pdf: add cluster summary section to PDF report</li>
<li>health pdf: add http error codes to PDF report</li>
<li>health pdf: add log warning counts to PDF report</li>
<li>jsp: errorPage with setStatus(200) not properly logged (#4804, rep by richardmoco)</li>
<li>solaris: solaris needs #define _POSIX_PTHREAD_SEMANTICS for proper ctime_r behavior (#4791, rep by Alan Wright)</li>
<li>health: added health events and anomaly events (#4724)</li>
<li>db-pool: reduced default max-create-connections back to 5 (#4734)</li>
<li>db-pool: add min-idle-count to &lt;database> configuration (#4664)</li>
<li>log: log-handler config wasn't in proper class loader context (#4784, rep by chris214)</li>
<li>log: flush logs in separate thread so writers don't need to be bottlenecked (#4765, apleshi)</li>
<li>servlet: allow null to getRealPath(null) which returns null (#4761, rep by stbu)</li>
<li>db-pool: on close connection, if auto-commit is false, do not automatically call rollback() (#4663)</li>
<li>jsf: updated to mojarra-2.1.3 (#4746, rep by cyttesen)</li>
<li>servlet: character-encoding should not be defaulted for images (#4778, rep by fesse)</li>
<li>webapp: detailed web-app statistics gathering needs flush (#4750)</li>
</ul>
</s2>


<s2 title="4.0.23 - Sep 30, 2011">
<ul>
<li>hessian: ServiceContext.end wasn't clearing _response pointer (rep by Mattias Jiderhamn)</li>
<li>health: added mail-to to PdfReport</li>
<li>websocket: connection: upgrade may exist with other tokens (#4771, rep by RLM)</li>
<li>cloud: cross-cluster server topology updates (#4764, rep by Alan Wright)</li>
<li>embed: WebAppEmbed undeploy was not cleaning up fully (#4749, rep by A. Knutsen)</li>
<li>jni: mmap file loading issue in win32 - disabled but shouldn't be throwing exception (#4758, rep by Mathias Langerwall)</li>
<li>health: PdfReport in resin.xml needs to use resin.root, not resin.home for pdf-gen.php (#4760)</li>
<li>resin: fixed bug preventing setup.exe and resin.exe support -java-home (#4763, rep by Brian Deng)</li>
<li>cli/watchdog: stop and kill with no -server should stop the unique server (#4732)</li>
<li>logging: log-handler el resolution fix (#4753)</li>
<li>xa: use rollback instead of forget in XA recover (#4748)</li>
<li>resin: JMX issue with not reporting correct request time and request count (#4660, rep by Rick Hightower)</li>
<li>cdi: scanning issues with directories with '+' in name (#4739)</li>
<li>init.d: changed init.d/resin to use "java" as backup Resin, also added $JOIN_CLUSTER (#4738)</li>
<li>server: changed Alarm timing algorithm (#4730)</li>
<li>session: add cookie-http-only to session-config (#4737, rep by L. Kaminsky)</li>
</ul>
</s2>

<s2 title="4.0.22 - Sep 1, 2011">
<ul>
<li>cluster deploy: .war issue on non-triad servers (#4743, rep by James Meyer)</li>
<li>servlet/cache: added range limits (#4744, rep by R Madej)</li>
<li>webapp: add alias-url-regexp to match multiple context-paths to a web-app (#4720, rep by Sachidanand Shukla)</li>
<li>command-line: added uptime to "status" command"</li>
<li>alarm: Alarm's base classloader needs to be Alarm not system classloader (#4707, rep by M Schmidt)</li>
<li>snmp: added snmpwalk support (#3721, rep by D. Devota)</li>
<li>jndi: EnvironmentModel dynamic copy needs ConcurrentHashMap (#4721)</li>
<li>servlet: getAvailable() issue with POST (#4726, rep by Olaf Krische)</li>
<li>install: --disable-64bit changes to ./configure and CFLAGS (#4714, rep by S. Patil)</li>
<li>ejb: @Async needs to propagage security principal (#4710, rep by ddalessa)</li>
<li>jsp: jsp:include/jsp:param parameter order issues (#4719, rep by Brandon Kearby)</li>
<li>distribution: unbundled resin-eclipselink.jar from resin.jar (#4722, rep by Steffen Busch)</li>
<li>async: request end needs to clear AsyncContext link (#4723, rep by Mark Price)</li>
</ul>
</s2>

<s2 title="4.0.21 - Aug 19, 2011">
<ul>
<li>env: data-source-definition ordering with JPA (#4712, rep by stoty)</li>
<li>ssl: extra debugging output for openssl with disconnecting client (#4709, rep by Keith Fetterman)</li>
<li>eclipse-plugin: install resin into version specific directory (#4693, rep by manishdevraj)</li>
<li>resin-cli: introduced new command start-with-foreground (see launchd restrictions)</li>
<li>resin-cli: unknown argument should fail resin start (#4689, rep alex)</li>
<li>log: log rotation alarm refactor (#4680, rep by Steve Francis)</li>
<li>rewrite: added &lt;resin:NotFound> (#4705, rep by Aaron Freeman)</li>
<li>git: corrupted .git on startup (#4701, rep by Bill Au)</li>
<li>cloud: added deploy-config and cluster-config: scheme (#4604)</li>
<li>i18n: utf8writer issues with surrogate pairs (#4700, rep by SHinomiya Nobuaki)</li>
<li>install: ./configure changes for Solaris cc (#4678, rep by nits4resin)</li>
<li>logging: Resin logging was not working properly in IBM JDK (#4695, rep by Steve Francis)</li>
<li>async: complete() should not dispatch a following GET (#4697, rep by Adrian Sutton)</li>
<li>servlet: sendRedirect from filter needs to escape redirect URL (#4699, rep by jyung)</li>
<li>session: maxInactiveInterval issues with persistent sessions and includes (#4692, rep by mnsh)</li>
<li>jni: changed crc64/readdir code to user readdir_r (#4698, rep by Peter Mei)</li>
<li>jsp: tag compilation issues with @Inject (#4690, rep by mnsh)</li>
<li>cdi: @Disposes introspection needs to be lazy on binding (#4681, rep by Dirk Mahler)</li>
<li>debian: updated resin/lib and resin/libexec64 (#4548, rep by dicr)</li>
<li>health: change health.xml to dump snapshot (rep by Bill Au).</li>
<li>servlet: added CsrfFilter (#4497, rep by Myeung Kyu Jang)</li>
<li>cdi/ejb: DataSourceDefinition timing with JPA (#4488)</li>
<li>vhost: i18n/idna parsing issues (#4583, rep by gfranz)</li>
<li>cdi/servlet: add WebApp.runInSessionContext to support threads using session scope (#4049, rep by sweigersf)</li>
<li>network: timeout issues with keepalive (#4683, rep by Amir Langer)</li>
<li>jsp: incorrect jsp:param encoding of '&amp;' (#4685, rep by dicr)</li>
<li>ejb/cdi: stateless decorators (#4630, rep by Chris)</li>
<li>install: check for /usr/libexec/java_home in ./configure (#4572)</li>
<li>servlet: request.getReader() mark/reset support (#3350, rep by karlgold)</li>
<li>loader: added ClassLoader.getResource and ClassLoader.getResourceAsStream cache (#4082)</li>
<li>logging: &lt;log-handler> needs to check for missing 'name' attribute (#4682)</li>
<li>health: PdfReport needs to require the &lt;path> parameter (#4679, rep by Bill Au)</li>
<li>jsf: jsf/resin integration when replacing jsf libraries in WEB-INF/lib (#4676, rep by cyttesen)</li>
<li>ScheduledTask: add validation of ScheduledThreadPool (#4668, rep by Wesley Wu)</li>
<li>servlet: add ThrottleFilter.getCurrent().addPoisonedIP(addr) (#4133, rep by Aaron Freeman)</li>
<li>install: add resinctl.in which will be filled in with configured location from ./configure (#4579)</li>
<li>jsp: JspCompiler should not start the web-app for compilation (#4397)</li>
<li>load-balance: add StickyHost for sticky load balancing (#2969, rep Daniel Bjuhr)</li>
<li>mod_caucho: restore 'backup' option for mod_caucho (#4673, rep by Halvor Utby)</li>
<li>resin-admin: profile needs better message when JNI not compiled (#4652)</li>
<li>install: ./configure changes for --disable-64bit to compile 32bit on a 64bit system (#4675, rep by nits4resin)</li>
<li>load-balance: add disable-soft to disable round-robin, but not session dispatching (#3365, rep by Cameron Stokes)</li>
<li>debian: resin-eclipselink was not added to debian files (#4547, rep by dicr)</li>
<li>cache/db: mmap synchronization updates</li>
</ul>
</s2>

<s2 title="4.0.20 - Jul 15, 2011">
<ul>
<li>health: PdfReport added</li>
<li>session: always-load-session needs to set local-read timeout to 0 (rep by Eric Kreiser)</li>
<li>network: comet/network state maching/timing issues (#4669, rep by Adrian Sutton)</li>
<li>cloud: heartbeat needed across clusters for global cache (#4657, rep by William Kong)</li>
<li>cloud: heartbeat needs to retry every 5s on connection failure (#4601)</li>
<li>network: keepalive housekeeping simplified (#4613, rep by Mark Cleveland)</li>
<li>session: session timeout needs to be picked up on persistent load (#4473, rep by vicsanca)</li>
<li>network: issues with too many CLOSE_WAIT connections (#4639, rep by Mark Price)</li>
<li>jsf: conversation scope issues with classloading (#4656, marcin_gomulkiewicz)</li>
<li>jpa: data-source lookup needs to check JNDI return type (#4591, rep by paru)</li>
<li>cron: day-of-week calculation bug (#4560, rep by Tyson Weighs)</li>
<li>health: add ShutdownService configuration to not restart on OOM (#4075, rep by Martin Thompson)</li>
<li>cli: console libexec needs to use same is64Bit as watchdog (#4558)</li>
<li>stat: add read/write byte statistics for http request (#4126, rep by Martin Thompson)</li>
<li>jpa: check persistent-unit NPE for EntityManagerJtaProxy (#4564, rep by dicr)</li>
<li>xa: recover/forget needs to check xid against current server (#4645)</li>
<li>webapp: multipart-config needed in servlet tag (#4648)</li>
<li>webapp: multiple-init issue with versioned controllers (#4637, rep by W. Au)</li>
<li>cdi/ejb: issue with @Alternative working with EJBs (#4636, rep by ChrisC)</li>
<li>jsp: NPE with trimDirectiveWhitespaces and empty scriptlet (#4651, rep by mnsh)</li>
<li>resin-admin: added 60s ajax updates to summary graphs (#4577)</li>
<li>quercus: DateTime NPE (#4596, rep by rmann)</li>
<li>cdi: InjectionPoint on producer was overriding all other producers (#4649, rep by Max Bureck)</li>
<li>command-line: add -data-directory to change location of resin-data (#4646, rep by Keith Fetterman)</li>
<li>command-line: command-line now uses hmux servers when available (#4616)</li>
<li>db/cache: Table.validateIndexes wasn't freeing its Block/TableIterator (#4624, rep by Michael O'Dea)</li>
<li>ssl: ssl write needs poll/select on SSL_ERROR_WANT_WRITE (#4582, rep by Mike O'Dea)</li>
<li>xa: failure during forget should be at finer logging, not warning (#4644, rep by Takahiro Fukuda)</li>
<li>multipart-form: added parameter-length-max (#4638, rep by Daniel Kador)</li>
<li>system: &lt;resin:LogService> needs to check for existing log system (rep by Adrian Sutton)</li>
<li>install: --with-resin-log should update init.d/resin.in (#4640, rep by K Fetterman)</li>
<li>health: added graph page configuration to health.xml (#4577)</li>
<li>network: refactored networking to split thread-safe/and non-thread-safe state machines (#4633, by Danny Yates)</li>
<li>resin: options on the command should be global (#4605)</li>
<li>resin: command line user mgmt (#4603)</li>
<li>jsf: allow JSF in WEB-INF/lib (will disables CDI) (#4573, rep by cyttesen)</li>
<li>hessian: debug should not throw illegal state exceptions but should log</li>
<li>database: allow numeric transaction-isolation values (#4627, rep by mnsh)</li>
<li>jpa: javax.persistence.Persistence classloader leak (#4628, rep by Patric Rufflar)</li>
<li>rewrite: CanDI-style rewrite rules in cluster were ignored (#4618, rep by Aaron Freeman)</li>
<li>scheduled-task: scheduled task remove has stack overflow (#4523, rep by mnsh)</li>
<li>security: JaasAuthenticator add support for Group/roles (#4621, rep by dicr)</li>
<li>admin: summary/postmortem now show startup info from watchdog (#4595)</li>
<li>db: row allocation must check for table close (#4599, rep by Steve Francis)</li>
</ul>
</s2>

<s2 title="4.0.19 - June 14, 2011">
<ul>
<li>command-line: resin-system-auth-key wasn't properly managed (#4602)</li>
<li>deploy: git/war validation needs better error messages for the ant jar task duplicate file creation (#4606, rep by Jeff Schnitzer)</li>
<li>logging: logger in &lt;resin> context needs to use system class loader to match command-line log-level (#4587, rep by William Au)</li>
<li>resin-admin: added undeploy action for repository managed webapps</li>
<li>command-line: authentication needs to understand {SSHA} configuration (#4593)</li>
<li>eclipse-plugin: added auto-restart for redeployed apps (req. by hwellmann, Caucho forums)</li>
<li>cache: lease changes for triad and cloud to reduce network traffic</li>
<li>deploy: add expand-preserve-fileset to web-app-deploy to improve development (#4592, rep by Harald Wellmann)</li>
<li>ejb: generic introspection/generation (#4590, rep by Harald Wellmann)</li>
<li>cache: leasing must apply to cloud servers (#4588, rep by William Kong)</li>
<li>cloud/bam: hmtp pool must be shared across server (#4588, rep by William Kong)</li>
<li>cloud/bam: remote send must return error messages (#4588, rep by William Kong)</li>
<li>eclipse-plugin: finishing server wizard early produces bad configuration (#4589, rep by hwellmann)</li>
<li>dist: add multiversion for debian packages (#4314, rep by jlangevin)</li>
<li>health: check MemUsage for max/committed to calculate free memory (#4507)</li>
<li>install: Makefile needs to create /var/log/resin event if /var/www exists (#4574)</li>
<li>cache: streaming cache update between clusters &lt;replication-source-cluster> (#4569)</li>
<li>install: webapp-jars need to be copied to resin.home (#4575)</li>
<li>jsp: c:set validation issue (#4586, rep by thihy)</li>
<li>websocket: text buffer size issues with 8192 length values (#4584, rep by ihristov)</li>
<li>ejb: EJBException serialization id needs generation (#4578, rep by cyttesen)</li>
<li>watchdog: Unix systems should not have -Xrs on the command-line (#4585, rep by William Au)</li>
<li>servlet/async: dispatch sync issues causing dispatches to be ignored (#4570, rep by Danny Yates)</li>
<li>resin: moved app-default to resin.jar, changed resin.xml's resin:import to load from classpath</li>
<li>php: fix for DOMDocument::saveXML($node) (#4563, rep by Lisa Stillwell)</li>
<li>resin-cli: added disable and enable commands to Resin Pro (#3756, rep by Rob Lockstone, Jonas Kowall)</li>
<li>async/comet: with Resin comet API, check for complete on suspend (#4534, rep by Brent Plump)</li>
<li>ejb: with generics Class&lt;T> as argument and return (#4551, rep by dicr)</li>
<li>servlet: finally handling for request needs to check for null (#4545)</li>
<li>access-log: add rollover-check-time configuration (#4533, rep by peng yao)</li>
<li>./configure: removed OPENSSL_LIB search instead using standard library (rep by Michael O'Dea)</li>
<li>ejb: synthetic/bridge methods should not be reflected (#4555, rep by dicr)</li>
<li>ejb: static methods for session beans should not be overridden (#4552, rep by dicr)</li>
<li>config doc: clarified database init-param vs IoC-style configuration (#4550, rep by dicr)</li>
<li>./configure: updated config.guess and config.sub (#4407, rep by GT500)</li>
<li>db-store: free block scanning needs to test for store close (#4562, rep by S Francis)</li>
<li>mod_caucho: allocation/free of locks needs to be locked (#4529, rep by remkodev)</li>
<li>network: read/write timeout needs handling in Java layer (#4506, #4524, rep by Matthew Schmidt, Prabhu)</li>
</ul>
</s2>

<s2 title="4.0.18 - May 12, 2010">
<ul>
<li>watchdog: set the LD_LIBRARY_PATH_64 variable on 64-bit systems (#4536)</li>
<li>access-log: rollover rescheduling of alarm was not reliable (#4540, rep by mros2stf)</li>
<li>ant-plugin: ant plugin has been moved to http://github.com/caucho/ant-plugin</li>
<li>resin-cli: added jmx-list, jmx-set, jmx-call commands</li>
<li>health: add  OnStart, OnStop, OnRestart health predicates (#4257)</li>
<li>scheduled-task: forward with param was causing NPE (#4530, rep by kenjrwalker)</li>
<li>web-app: explicit web-app id="/" must override webapps/ROOT (#4531, rep by danielnuriyev)</li>
<li>session: distributed sessions now allows jdbc as a backup (#3929, rep by jkriesten)</li>
<li>servlet: fragment after/others ordering issues (#4523)</li>
<li>cdi: abstract decorators were not properly handled (#4406)</li>
<li>servlet: crlf escaping required for response headers because of rewrite-dispatch (#4525)</li>
<li>jpa: when jta-data-source is null and JPA fails to start, allow web-app to start w/o error (#4491)</li>
<li>watchdog: ResinMXBean now contains information about the last watchdog restart (#4257, rep by Tony Matson)</li>
<li>jsp/el: MethodExpr invocation was not applied property (#4515)</li>
<li>candi: @Produces on @Stateless with no interfaces (#4513)</li>
<li>config: add &lt;data-source> element support (#4487)</li>
<li>jsp/el: BeanELResolver isValue/getValue mismatch (#4511, rep by Keith Fetterman)</li>
<li>servlet: web-fragment &lt;name> can have an "id" attribute (#4484)</li>
<li>candi: ResinBeanContainer beans.xml @Alternatives issue (#4501)</li>
<li>candi: ResinBeanContainer JPA/beans.xml ordering issues (#4502)</li>
<li>session: add destroy-on-lru flag to session-config to call SessionListener.destroy on a LRU even when session is persisted (#4504)</li>
<li>servlet: CauchoRequestWrapper updates for MockHttpServletRequest compatibility (#4509)</li>
<li>jstl: c:set not properly returning XML for validation (#4492)</li>
<li>ejb: stateless generics on interface superclass (#4512, rep by andreaskaltenbach)</li>
<li>ejb: stateless generics on method argument (#4514)</li>
<li>config: &lt;class-loader> has automatic priority (#4500)</li>
<li>watchdog: signal status reporting was showing exit 0 for signals (#4508)</li>
<li>hessian: send-collection-type should always send java.util types (#4489, rep by Keith Fetterman)</li>
<li>ioc: resin:message not properly initialized (#4496, rep by Keith Fetterman)</li>
<li>ioc: env-entry does not use EL - doc update (#4516, rep by mnsh)</li>
<li>ejb: ejb-ee jar with &lt;entity> should be skipped w/o fatal error (#4503, rep by Rick Mann)</li>
</ul>
</s2>

<s2 title="4.0.17 - Apr 15, 2011">
<ul>
<li>candi: jar order dependency for ProcessManagedBean (#4493, rep by andreaskaltenbach)</li>
<li>security: order dependency between user-role and transport guarantee (#4495, rep by Keith Fetterman)</li>
<li>netbeans: fixed installation issues and change deployment options to deploy to an exploded web-apps directory</li>
<li>eclipse: fixed "Debugging does not work with 4.0.15 version of the Eclipse plugin" bug (#4417, rep by stoty)</li>
<li>eclipse: fixed "Eclipse plug-in won't install" bug (#4418, rep by adamzr)</li>
<li>resin: added thread-dump, heap-dump, log-level and profile commands.</li>
<li>el: add mbean function for JMX attribute access</li>
<li>el: add =~ for regular expression matching</li>
<li>resin-admin: include link to SSL on deploy page when accessing non-ssl (#4455)</li>
<li>resin-admin: hide user/password generation when user exists (#4486, rep by Keith Fetterman)</li>
<li>resin-admin: use {SSHA} for generated password</li>
<li>webapp: webapp restart/session close timing issues (#4471, rep by jiucal)</li>
<li>rewrite: Forward with target="/foo?q=2" caused duplicate query param (#4431, rep by mhixson)</li>
<li>install: make install updates (#4468, rep by silent)</li>
<li>openssl: connection must close if SSL_write fails (#4476, rep by Keith Paulson)</li>
<li>boot: ResinActor should not be started when Resin called directly (#4440)</li>
<li>proxy-cache: inappropriate warning on included cache (#4472, rep by Keith Fetterman)</li>
<li>jsp: special case jsp:fragments with single jsp:element (#4463, rep by imaniyar)</li>
<li>maven: EnvInit was improperly logged (#4481, rep by ccwf)</li>
<li>jsp-el: resolve introspection conflict between getFoo() and getFoo(i) (#4462, rep by jhartline)</li>
<li>dist: deprecated resin-ant tasks. The command-line should be used instead (#4447)</li>
<li>startup: resin.exe space issues with -conf (#4448, rep by pmorrow)</li>
<li>resin-admin: mod_status requires Resin Pro (#4454)</li>
<li>el: conversion issues from string '1.0' to long (#4482)</li>
<li>proxy-cache: issue with include, and filter and wrapped output (#4437, rep by Haley)</li>
<li>vfs: update http: normalization to use query-string verbatim (#4427, rep by Deepak Jadhav)</li>
<li>candi: ResinBeanContainer standalone (#4434)</li>
<li>log: add ${thread} to log formatting (#4459, rep by Keith Fetterman)</li>
<li>deploy: issues with merging versioned webapps with explicity &lt;web-app> (#4444, rep by Keith Fetterman)</li>
<li>deploy: restart timing issue with .war alarm, request and slow start (#4474, rep by Mattias Jiderhamn)</li>
<li>ejb: stateless matching of varargs to API (#4466, rep by andreaskaltenbach)</li>
<li>repository: repository tag-map timing issue (#4450)</li>
<li>session: Java deserialization not using proper classloader (#4475, rep by Keith Fetterman)</li>
<li>install: config/health.xml location issues (#4443)</li>
<li>install: doc/resin-doc location fixed for make install (#4445, rep by Bill Au)</li>
<li>cloud: removed obsolete HmtpRequest logging (#4461, rep by TJ Wallace)</li>
<li>session: change default serialization to "java" instead of "hessian"</li>
<li>cluster: add -join-cluster for dynamic server support</li>
</ul>
</s2>

<s2 title="4.0.16 - Mar 17, 2011">
<ul>
<li>rewrite-dispatch: normalization of rewrite order so rewrites always occur before filters</li>
<li>server: add server information to 404 error pages (#4433, rep by Alex Sharaz)</li>
<li>server: invocation-cache-size wasn't properly configurable (#4428, rep by R. Ranjan)</li>
<li>cluster: cluster/network timings split from load-balance configuration (#4429, rep by Dmitri Kolpakov)</li>
<li>cluster-cache: mismatched message/query replication for data actor (#4425, rep by Dmitri Kolpakov)</li>
<li>session: inconsistent setMaxInactiveInterval with timeouts (#4419, rep by vicsanca)</li>
<li>proxy-cache: check cache refill against invalidated cache (#4413, rep by shine)</li>
<li>cdi: @Stateless beans need to be treated as serializable for injection (#4405)</li>
<li>ioc/xml: update error messages for whitespace properties (#4385, rep by jkriesten)</li>
<li>watchdog: update error message on 500 exception to a watchdog (#4402, rep by Alex Sharaz)</li>
<li>mod_caucho: configuration etag wasn't including timeouts and therefore wasn't updating (#4259)</li>
<li>servlet: ServletContext.getResource("/foo/") was not returning URL when foo is a directory, needed for spring (#4411, rep by ccwf)</li>
<li>access-log: add '%S' for session tracking (#4422, rep by Steffen Busch)</li>
<li>include/forward: cross-context include/forward was not switching WebApps properly (#4362, rep by igor)</li>
<li>classloader: enabled jar caching to improve startup times (#4420, rep by Mattias Jiderhamn)</li>
<li>database: toLowerCase must use toLowerCase(Locale.ENGLISH) for Turkish encodings (#4414, rep by ozgurcakmak)</li>
<li>watchdog: Resin shutdown warning exceptions need to be caught on shutdown (#4400, #4402, rep by Daniel Lopez, Alex Sharaz)</li>
<li>servlet: addCookie should allow cookie with null value (#4410, rep by Brandon Kearby)</li>
<li>install: resin-doc copy issues (#4408, rep by copart)</li>
<li>install: validator/slf4j added to webapp-lib (#4386, rep by Jeff Schnitzer)</li>
<li>proxy-cache: corrupted data with client disconnects (#4398, rep by Luke Jobling)</li>
<li>watchdog: stdout-log inside &lt;cluster> now configures the watchdog managed jvm-default.log (#4395, rep by Steve Francis)</li>
<li>openssl: timeout support for solaris (#4280, rep by nicolai)</li>
<li>configure: change solaris build to include -R/usr/sfw/lib/64 for -d64 and resin_os.so linking (#3045, rep by Eric Bowman)</li>
<li>ejb: MDB with JMS inflow (ActiveMQ) not properly handling XA (#4327, rep by danc)</li>
<li>ejb: MDB with JCA inflow and driver XA control not properly handled</li>
<li>security: add RFC2307 (ldap-style) support for {plain}, {sha}, {ssha}, {md5} (#3432, rep by Laurent Jaccard)</li>
<li>cdi: @MBean on class automatically registers bean in JMX (#3427, rep by Scott Hernandez)</li>
<li>webservices: add ${resin.home}/endorsed support for metro support (#3415, #4032, rep by Bartlomeij Kolodziejczyk, Reggie Vito)</li>
<li>rewrite: conflict between rewrite (welcome-file) and custom constraint (#4388, rep by K Ding MNP)</li>
<li>scheduled-task: CDI timing issue between scheduled-task and CDI bean (#4393, rep by Tero Ripattila)</li>
<li>ssl: JSSE client certificate should not automatically populate getUserPrincipal (#4044, rep by adamknight)</li>
<li>install: configure was not detecting plugins on x360 (#4383, rep by mros2stf)</li>
</ul>
</s2>

<s2 title="4.0.15 - Feb 8, 2011">
<ul>
<li>eclipse-plugin: require automated eval. license request only for new download (#4379, rep by Daniel Lopez)</li>
<li>jsp: sendRedirect in JSP could cause IllegalStateException (#4290, rep by Mattias Jiderhamn)</li>
<li>cookie: ssl-session-cookie should not automatically set Secure for the non-SSL cookie (#4372)</li>
<li>/resin-admin: increased upload_max_filesize for web app deployment. New limit is 128Mb. (#4371 rep by Naoki Yano)</li>
<li>bam/cluster: HmtpQueue in ProDomainManager needs to be ConcurrentHashMap and not WeakReference (rep by Jamie Novak)</li>
<li>watchdog: "status" was returning the watchdog's user, not the Resin instance user (#4359, rep by mros2stf)</li>
<li>async/comet: request should not force flush on async (#4360, rep by Manoj Chennath)</li>
<li>cloud: server.ifSelf() changed to more reliable predicate (#4355, rep by Jamison Novak)</li>
<li>http: url-length-max wasn't allowing large URLs (#4358, rep by Daniel Kador)</li>
<li>cloud: messages during startup are queued if mailbox isn't registered yet (rep by Jamison Novak)</li>
<li>cdi: enable Conversation scope for JSP/servlets</li>
<li>database: add DatabaseManager.closeConnection (#3703, rep by Nobuaki Shinomiya)</li>
<li>servlet: request HashMapImpl fixes for inserts (#3726, rep by Fiaz Hossein)</li>
<li>install: ${resin.root}/resin-doc will be updated on a new install (#4350, rep by mros2stf)</li>
<li>resin-admin: use ${resin.root}/resin-doc location for resin-admin (#4350, rep by mros2stf)</li>
<li>configure: test for dev environment faulty, causing resinssl build issues (#4352, rep by mros2stf)</li>
<li>meter/sensor: add sensor callback to so failures can be acted on (#3731, rep by Martin Thompson)</li>
<li>resin-admin: if admin-users.xml.generated cannot be created in resin.conf, use resin-data (#3785)</li>
<li>network: add listener/port read/write statistics (#4150)</li>
<li>bam: separate queues for large messages (#4128, rep by Martin Thompson)</li>
<li>git: validate repository and reload from triad if corrupted (#4341, rep by Jamison Novak)</li>
<li>cdi: serialization of intercepted beans (#4083, rep by sweigersf)</li>
<li>cdi: enhanced CDI beans must use proxies (TCK)</li>
<li>jni: JniSelectManager should use toError() is removeNative fails (#4349, rep by Jens Christensen)</li>
<li>gzip: flush/error issue with JSP (#3893)</li>
<li>watchdog: add "watchdog" command for MacOS LaunchD (#3891, #4124, rep by Rob Lockstone)</li>
<li>session: if session is not valid due to timing issues, create new session (#3942, rep by bregnvig)</li>
<li>jpa: eclipselink was not properly closed on webapp restart (#4154, rep by Riccardo Cohen)</li>
<li>ssl: jsse-ssl add cipher-suites-forbidden (#3970, rep by Aaron Freeman)</li>
<li>jsp: @page contentType should not affect request.getCharacterEncoding() (#4007, rep by Shinomiya Nobuaki)</li>
<li>ssl: jsse-ssl add verify-client="optional" support (#4052, rep by adamknight)</li>
<li>ear: ear deployment problems when war context-url is "/" (#4348, rep by koge_pan)</li>
<li>security: allow FormLogin with selected authenticator (#4143)</li>
<li>cdi: allow inline injection &lt;value>&lt;qa:MyQualifier>&lt;/value></li>
<li>session: add serialization-collection-type to allow disabling of Hibernate collection serialization (#4211, rep by Matthew Schmidt)</li>
<li>watchdog: on configuration error, delay Resin restart by 30s (#4202, rep by norlab)</li>
<li>load-balance: bind-ports-after-start and disable should cause failover during startup (#4129, rep by Wesley Wu)</li>
<li>date: setMonth(1) when setDay(31) previously was setting to march (#4094, rep by nam)</li>
<li>admin: add isJniEnabled() property to the Port MBean (#4088, rep by skippopotamus)</li>
<li>servlet: allow cookies with space values (#3897, rep by ykim)</li>
<li>cluster: triad warning when triad servers are on same machine (#4177)</li>
<li>webapp: web-app deployment with invalid root-directory needs warning (#4207)</li>
<li>database: logging adds ".d0", ".d1" to show round-robin (#4222, rep by Anthony Balandran)</li>
<li>init.d: change init.d/resin to log startup to /var/log/resin/console.log (#4223, rep by Raul Luna)</li>
<li>i18n: changed MacRoman file.encoding to default to utf-8 (#4180)</li>
<li>url: invalid utf-8 character parses to %xfffd (#4183, rep by cjohn)</li>
<li>comet: add suspend-reaper-timeout to port configuration (#4249, rep by baoqinye)</li>
<li>startup: Resin started message changed to log at INFO level (#4135, rep by briandeng)</li>
<li>database: check isClosed() on connection reuse to avoid dead connections (#4231)</li>
<li>log: rollover needs dedicated alarm for proper timeout (#4234, rep by mros2stf)</li>
<li>watchdog: relative -root-directory was applying the relative path twice (#4198)</li>
<li>servlet: getResource("/") was returning a URL for the directory incorrectly (#4301, rep by mate)</li>
<li>watchdog: Resin child needs -Xrs on windows (#4308, rep by robin dun)</li>
<li>deploy: web-app start needs to synchronize on getDeployInstance (#4342, rep by Jamison Novak)</li>
<li>session: session cache needs to use createIfAbsent to avoid timing issues (#4340, rep by Jamison Novak)</li>
<li>access-log: AbstractRolloverLog needs dedicated rollover alarm (#4321, rep by mros2stf)</li>
<li>access-log: content-length improperly calculated for chunked (#4317, rep by Martin Thompson)</li>
<li>rewrite: added AddHeader to add cookies (#4326, rep by C. Stokes)</li>
<li>jni: npe check for nativeWrite (#4323, rep by Prabhu)</li>
<li>watchdog: check that watchdog-manager.log can be written before starting (#4333)</li>
<li>cloud: errors for messages which cannot connect log the destination for debugging (#4315, rep by Cameron Stokes)</li>
<li>proxy-cache: 304 returned for proxy cache (#4239, rep by Jamison Novak)</li>
<li>proxy-cache: pdf/range using improper recursive call (#4334 rep by C. Fernandez)</li>
<li>embed: add setAsyncSupported to ServletEmbed (#4332, rep by Michael Barker)</li>
<li>resin: LoadBalance inside &lt;web-app> needs to pass along context-path (#4304, rep by Kenneth Yeung)</li>
</ul>
</s2>

<s2 title="4.0.14 - Jan 7, 2011">
<ul>
<li>resin: CLI added deploy, undeploy, list, start-webapp, stop-webapp, restar-webapp commands (#4316, rep by Patrick Brigger)</li>
<li>cache: use cursor to update data timeouts</li>
<li>heartbeat: server connections need to depend on heartbeat only</li>
<li>access-log: off-by-one issue with access log rollover causing missed 1D (rep by Steve Francis)</li>
<li>thread: if Thread cannot be instantiated, restart Resin (rep by B Hafezi)</li>
<li>quercus: SimpleXMLElement needs a __count function (#4318, rep by Homayoun Zariv)</li>
<li>quercus: list($a) = each($this->foo) was not compiled properly (#4319, rep by Akara Sucharitakul)</li>
<li>quercus: add array_replace, array_replace_recursive (#4312, rep by Homayoun Zariv)</li>
<li>quercus: simplexml_load_file not working properly with http: (#4311, rep by Akara Sucharitakul)</li>
<li>cdi: InjectManager.resolveAllBeans with incorrect synchronization (rep by Wesley Wu)</li>
<li>security: FormLogin persistence/session issues (#4299, rep by Jamison Novak)</li>
<li>jsp-el: parsing confusion with "0#${foo}" (#4190, rep by olaf2010)</li>
<li>rewrite: host-level rewrite issues with access-log (#4198)</li>
<li>distribution: slf4j.jar removed from resin/lib (#4271, rep by Nicolai Steven)</li>
<li>servlet: setHeader("Content-Length", "12;") was throwing an exception (#4210, rep by mkjang)</li>
<li>servlet: getOutputStream was not allowed after flushBuffer (#4289, rep by vbavin)</li>
<li>db-pool: increased default DB create count to 20 (#4252, rep by Wesley Wu)</li>
<li>hessian: change HessianServlet to extend HttpServlet (#4193, rep by voodude)</li>
<li>cookie: change &lt;http-only> to apply only to the session cookie (#4217, rep by gzhu)</li>
<li>thread: priority thread queue fixes (#4228, #4291, rep by Jamison Novak)</li>
<li>thread: refactor ThreadLauncher to use AbstractTaskWorker</li>
<li>cdi: error with @Produces method with generic result and @Named (#4265, rep by jharting)</li>
<li>cdi: allow &lt;resin:FileQueue> to be assigned to BlockingQueue&lt;MyItem> (#4067, rep by Jeff Schnitzer)</li>
<li>jsp: cross-context forward classloader/.tld not updating (#4284, rep by Brian Deng)</li>
<li>ejb: generic interface issues MyBean implements Foo&lt;String> (#4266, rep by jharting)</li>
<li>servlet: cross context forward classloader not properly updated (#4248, rep by jessicay)</li>
</ul>
</s2>

<s2 title="4.0.13 - Nov 10, 2010">
<ul>
<li>hessian: java.sql.Timestamp deserialization NPE (#4286, rep by Matt Poirier and Shawn Frederickson)</li>
<li>servlet: url-mapping="" was not handled properly (#4283, rep by Peter Yuill)</li>
<li>welcome-file: use 301 instead of 302 (#4212, rep by jkowall)</li>
<li>conf: sample resin.xml no longer uses www-data user-name (#4220, rep by Arthur Naylor)</li>
<li>ejb: EjbInjectionTarget ordering (#4057, rep by Jeff Schnitzer)</li>
<li>file servlet: 404 should take precedence over OPTIONS (#4218, rep by stbu)</li>
<li>conf: server-default not configured property (#4251, rep by snw)</li>
<li>jsp: fragment/attribute issues with jsp (#4258, rep by nfederov)</li>
<li>rewrite: convert recursion to iteration to handle many rewrite rules (#4272, rep by Nick Pilch)</li>
<li>cdi: @Alternatives processing ordering issues rep by (Wesley Wu)</li>
</ul>
</s2>

<s2 title="4.0.12 - Oct 15, 2010">
<ul>
<li>dist: cr-nl issue on windows for .git commit  (#4241, rep by James Gittelson)</li>
<li>session: serialization issues with classloader and timeout (#4254, rep by Steven Nicholai)</li>
<li>dbpool: ping on connection/statement errors instead of discarding</li>
<li>health: add ConnectionPoolHealthCheck</li>
<li>watchdog: "stop" should shutdown the watchdog manager if the last server is stopped</li>
<li>health: log HealthCheck warnings and failures</li>
<li>host: allow id=":8081" for /resin-admin as virtual host</li>
<li>dbpool: ping now only occurs after an error</li>
<li>xa: detach JCA pooling from UserTransaction</li>
<li>xa: add meters, JMX and HealthCheck for transaction manager</li>
<li>resin: access.log rotation into zip archive fixes (#4216)</li>
<li>dist: war files with many entries cause recursive overflow (rep by Steve Francis, #4236)</li>
</ul>
</s2>

<s2 title="4.0.11 - Sept 29, 2010">
<ul>
<li>hessian: XSS protection against bogus message (rep by Dan Cornell)</li>
<li>servlet: CauchoResponseWrapper shouldn't assume wrapping CauchoResponse (#4206)</li>
<li>class-loader: getProtectionDomain() should return the file:... for the jar object, not the jar contents (#4194)</li>
<li>resin-admin: JMX display has been reorganized and domains split into tabs</li>
<li>resin-admin: graph generation has been updated</li>
<li>resin-admin: thread page now includes locking tab giving blocking threads and their lockers.</li>
<li>resin-admin: thread page includes locking information in stack trace.</li>
<li>resin-admin: webapp page now includes deployment version validation.</li>
<li>health: HealthCheck added to JMX</li>
<li>health: JvmDeadlock and Memory checks were not being added to the Health check.</li>
</ul>
</s2>

<s2 title="4.0.10 - Aug 23, 2010">
<ul>
<li>candi: _namedBeanMap is active and needs to be a ConcurrentHashMap (rep by Wesley Wu)</li>
<li>hessian: for HessianServlet, do not attempt to find implicit API (#4168, rep by Riccardo Cohen)</li>
<li>remote: add cxt to artifacts (#4314, rep by Riccardo Cohen)</li>
<li>remote: cxt needs to have WebServiceContext (#4314, rep by Riccardo Cohen)</li>
<li>remote: @HessianRemote as servlet was instantiating two instances (#4175, rep by Jeff Schnitzer)</li>
<li>embed: ResinBeanContainer verified to work with XA and Database (#4160, rep by Michael Barker)</li>
<li>proxy-cache: proxy-cache requiring Pro warning was being shown even when proxy-cache was available (#4173)</li>
<li>admin: jmx-service, log-service in the old &lt;management> allowed for open source (#4172)</li>
<li>database/xa: distinct &lt;database> should be distinct Resource Managers (#4176, rep by Takahiro Fukuda)</li>
<li>cluster: removed &lt;machine> tag as obsolete</li>
<li>load-balance: fixes to weight and warmup</li>
<li>load-balance: created LoadBalanceService for testability</li>
<li>watchdog: added logging of Resin exit codes on detected shutdown</li>
<li>system: added ShutdownService to centralize Resin shutdown</li>
<li>system: added WarningService to send Resin messages to the watchdog</li>
<li>embed: add ResinEmbed.setRootDirectory and WebAppEmbed.setArchivePath (rep by Danny Yates)</li>
<li>resin-admin: jmx hide &amp; show acted on wrong detail boxes. (#4145, Rep by Jamison Novak)</li>
<li>jpa: eclipselink properties for Resin JTA not set when eclipselink found by scanning (#4167, rep by Riccardo Cohen)</li>
<li>thread: alarm locking issue (rep by Wesley Wu, Jan Kriesten)</li>
<li>win: fixed dll loading issue (#4159), rep hans</li>
<li>servlet: fixed cross context include issue (#4117), rep Brian Deng</li>
<li>servlet: fixed getInputStream issue for String params with Servlet3.0 Part (#4153), rep by Wesley Wu</li>
<li>servlet: remove &lt;multipart-form> from app-default.xml (#4102, rep by Brian Deng)</li>
<li>file: range parsing issue with firefox and FileServlet (#4149, rep by Fred Howell)</li>
</ul>
</s2>

<s2 title="4.0.9 - 2010-07-26">
<ul>
<li>remoting: add userName and password to HessianClient (#4130, rep by Jeff Schnitzer)</li>
<li>build: missing eclipselink in build (rep by Bill Au)</li>
<li>alarm: updates for atomic refactor causing cpu-spin (rep by Jeff Schnitzer)</li>
<li>watchdog: set log rollover size to 64m (rep by Scott Croco)</li>
<li>candi: ioc/timing issue with EL configuration and custom beans (#4131, rep by Jeff Schnitzer)</li>
<li>(2010-07-20) cloud: refactor triad messaging into BamTriadServer in cloud.bam for consistency across cloud services</li>
<li>cloud: refactor heartbeat into cloud.heartbeat and increase service priority</li>
<li>network: refactor hmtp/cloud client pool from cluster into cloud.bam</li>
<li>network: refactor network listener from Server into cloud.network</li>
<li>network: refactor cluster listener from Server into cloud.network</li>
<li>resin: refactor Resin/Server main to use ResinSystem</li>
<li>database: locking/sync rework to use atomic references when possible</li>
<li>database: locking/sync rework to use JDK's locking</li>
<li>candi: CDI session destroy must be after other session listeners (#4901, rep by sweigersf)</li>
<li>thread: Thread/ThreadWorker rework to use atomic references where possible</li>
<li>thread: Thread/ThreadWorker sync issues (#3960, rep by rmann)</li>
<li>LogService: add pooled connection (#4096, rep by Brian Deng)</li>
<li>watchdog: added &lt;resin-system-auth-key&gt; for watchdog authentication (#4113)</li>
<li>dist-session: performance/locking work for DB stability and perf (#4089, #4093, rep by Skippopotamus)</li>
<li>database: createSQLXML filter implemented (#4092, rep by alex)</li>
<li>server: utf-8 encoding issues in ServletResponse (#4101, #4106, rep by jkriesten, Kaj Hejer)</li>
</ul>
</s2>

<s2 title="4.0.8 - June 28, 2010">
<ul>
<li>servlet: added support for MockHttpServletRequest and MockHttpServletResponse: (#4073)</li>
<li>configure: fix for bad libtool message: (#4048)</li>
<li>resin: fixed startup routine for directory with spaces issue: (#4021)</li>
<li>resin-admin: fixed IllegalStateExceptionwith with readonly conf/admin-users.xml.generated (#4055)</li>
<li>servlet: fixed NPE with MultipartConfig caching bug (#4051, rep by subwiz)</li>
</ul>
</s2>

<s2 title="4.0.7 - May 21, 2010">
<ul>
<li>iis: fixed bug preventing iis from serving web-apps defined with web-app tag (#3890)</li>
<li>iis: allow IIS to choose when to use chunked encoding (#3871)</li>
<li>iis: 64 bit IIS Handler build provided (#3846)</li>
<li>iis: fixed aberrant behaviour of servlets with IIS7 (#2694, rep by mitch)</li>
<li>iis: fixed bug preventing iis plugin from sending data larger 20kb(#3178, rep gert)</li>
<li>iis: fixed bug preventing static content from being served by the plugin(#3889)</li>
<li>iis: fixed bug was preventing use of virtual hosts with ports in IIS + Resin setup(#3951)</li>
<li>init.d: added "status" to init.d/resin (#3841, rep by Matt Pangaro)</li>
<li>init.d: test for log_daemon_msg directly (#3932, #4012)</li>
<li>proxy-cache: no longer disable cache on exception (#3957, rep by Dave Hintemeyer)</li>
<li>rewrite: add &lt;resin:IfMBeanEnabled> (#4042, rep by stbu)</li>
<li>rewrite: add &lt;resin:MovedPermanently> (#4023)</li>
<li>ssl: jsse doesn't understand Socket.shutdownOutput (#4030, rep by Martin Morawetz)</li>
<li>jpa: Persistence.getPersistenceUtil() (#4038, rep by Kaj Hejer)</li>
<li>hmux: Thread.dumpStack() in HMUX with JSP data after sendRedirect (#4025, rep by vicsanca)</li>
<li>http: catch ClientDisconnectException during finish/skip (#4029, rep by iRideSnow)</li>
<li>network: keepalive-timeout was incorrectly applied to initial read (#4001, rep by Jamie Novak)</li>
<li>quercus: WWW-Authenticate does not work (#4000, rep by hm2k)</li>
<li>quercus: NullPointerException in Alarm (after Glassfish redeploy) (#3711, rep by ashamash)</li>
<li>quercus: quercus-4.0.6.war incorrect version reporting (#4033)</li>
<li>quercus: date_format() does not use user-set default time zone (#4034, rep by sblommers)</li>
<li>quercus: report as php 5.2.1 (#3916, rep by derickso)</li>
<li>quercus: parse_ini_file does not replace PHP Constants (#3878, rep by ice-breaker)</li>
<li>quercus: PHP clone object is ignored? (#3607, rep by sblommers)</li>
<li>quercus: error_display in php.ini (#4037, rep by wml)</li>
<li>quercus: java.lang.NullPointerException on drupal admin/user/permissions (#4020, #4035, rep by alberto, sblommers)</li>
<li>quercus: is_executable is broken (#3979, rep by domdorn)</li>
<li>quercus: Wordpress MU Settings link causes exception (#3918, rep by chiefgeek)</li>
</ul>
</s2>

<s2 title="4.0.6 - April 6, 2010">
<ul>
<li>openssl: crypto threading issues with CRYPTO_set_locking_callback (#3531, #3740, rep by Benjamin Loy, bryan)</li> 
<li>jni: socket accept/close changes to avoid fd leak (#3960, rep by rmann)</li>
<li>jsp: jsp:param in jsp:include must encode '%' (#3976, rep by Aaron Freeman)</li>
<li>servlet: escape status message for default error page (#3781, rep by Bill Au)</li>
<li>class-loader: changed override order to match config order (#3773, rep by cyttesen)</li>
<li>servlet: add cookie-domain-regexp to &lt;session-config> (#3865, rep by Matt Sporleder)</li>
<li>watchdog: add &lt;jvm-arg-line> as shortcut for &lt;jvm-arg> (#3940, rep by Bill Au)</li>
<li>log: print timestamp only for first item for multiline (#3229, rep by Jamison Novak)</li>
<li>log: remove excess synchronization for log period calculation (#3814, rep by zenant)</li>
<li>log: change date calculating to use TimeZone.getOffset(time) (#3853, rep by Jamison Novak)</li>
<li>cdi: allow circular XML/EL definition of beans (#3954, rep by Hontvari Jozsef)</li>
<li>classloader: avoid class loader deadlocks on ClassEntry (#3848, rep by zenant)</li>
<li>jni: LD_LIBRARY_PATH handling moved from Watchdog to SystemClassLoader</li>
<li>servlet: micro-second logging not properly matching start time (#3935, rep by mocospace)</li>
<li>jsp: jsp:forward issues with buffer="10k" (#3922, rep by Danny Mann)</li>
<li>jsp: SimpleTag parents not properly managed with fragments (#3953, rep by Jamison Novak)</li>
<li>jni: readNative was not properly handling SO_RCVTIMEO (#3941, rep by Vinod Mehra)</li>
<li>configure: --enable-64bit needs to enable both JNI and plugin (#3968, rep by Bill Au)</li>
<li>cdi: ProcessInjectionTarget.getAnnotatedType() was returning null (#3967, rep by jharting)</li>
<li>ejb: ejb-ref partial support added (rep by 3964, rep by Matthew Brew)</li>
<li>jsp: x:forEach was not properly setting isFirst and isLast (#3752, rep by biku)</li>
<li>rewrite: IfNetwork now supports IPv6 (#3903)</li>
<li>ejb: ejb-server should no longer be required (rep by smallufo)</li>
<li>network: IPv6 support (#3924, rep by webapps)</li>
</ul>
</s2>

<s2 title="4.0.5 - March 16, 2010">
<ul>
<li>mod_caucho: read timeout needs to repeat only on EINTR</li>
<li>setup.exe: added GUI capability to install and remove Resin Services</li>
<li>resin.exe: moved service installation commands (-install, -install-as, -remove, -remove-as) to setup.exe</li>
<li>jsp: the implementation produced successful results with the latest JSP TCK V2.1b</li>
<li>servlet: check isSecure() for NPE on close (#3938, rep by mocospace)</li>
<li>jsp: check for *.jsf servlet causes NPE (#3937, rep by tangxj)</li>
<li>servlet: welcome-file-list changes with *.jsf</li>
<li>cloud: cluster single-signon no longer enabled automatically</li>
<li>cloud: cluster store database stress test fixes (#3895, rep by smallufo)</li>
<li>cloud: cluster store database was not properly handling QueryContext (#3850, rep by mocospace)</li>
<li>watchdog: permissions issues with ports and log files (rep by Jamison Novak)</li>
<li>admin: added HealthJvmDeadlock in com.caucho.env.health (#3912, rep by Jamison Novak, #3912)</li>
<li>admin: refactored Sample and Probe to com.caucho.env.sample</li>
<li>hessian: writeReplace should be allowed to return itself (rep by Jamison Novak, #3911)</li>
</ul>
</s2>

<s2 title="4.0.4 - Feb 23, 2010">
<ul>
<li>jni: improved error messages</li>
<li>hessian: custom deserializer (#3632, rep by era)</li>
<li>configure: check for cp -u (#3888, rep by Kaminsky, Leonid)</li>
<li>configure: standardize default resin root, conf, and log directories</li>
<li>web-app: web-app deploy with archive-and root-directory was not propery set (#3887, #3873, rep by chiefgeen)</li>
<li>cdi: @ServiceType (@HessianService) was removing the bean from CDI (#3852, rep by Scott Hernandez)</li>
<li>javac: external javac was busy-looping on the output causing heavy load (#3847, rep by mocospace)</li>
<li>session: persistent sessions were not properly timed out (#3872, rep by chiefgeek)</li>
<li>jpa 2.0: add com.caucho.env.jpa.DisabledPersistenceProvider (#3760, rep by Georg Busch Bech)</li>
<li>jpa 2.0: api and CanDI integration</li>
<li>ioc: issues with circular references (#3886, rep by Hontvari Jozsef)</li>
<li>ioc: issues with CDI "diamond" creation (#3863, rep by Wesley Wu)</li>
<li>jsp: TeamCity JSP related fixes (#3115)</li>
<li>(2010-02-10) proxy-cache: missing write Lock on cache deallocation (#3885, rep by KovIS)</li>
<li>logging: Logger.getHandlers() must return empty array instead of null (#3882, rep by Knut Forkalsrud)</li>
<li>load-balance: setting of isSecure was not properly cleared (rep by Matt Pangaro)</li>
<li>boot: check for Java 1.6 or later before start (#3862, rep by Tom Howard)</li>
<li>ejb: MessageDriven updated to understand ConnectionFactoryJndiName</li>
<li>mod_caucho: backup needs to hash the entire cookie for the new clustering (#3877)</li>
<li>quercus: remove java_bean and java_lookup Resin dependencies (rep by domdom)</li>
<li>junit: add com.caucho.junit.ResinJUnitRunner for junit</li>
<li>embed: add com.caucho.resin.ResinContext for non-server embedding, e.g. testing.</li>
<li>javaee: refactor @PersistenceContext, @PersistenceUnit, @Resource (#3708, rep by Wesley)</li>
<li>deploy: git-expand needs to setLastModified of created files to consistent time (#3839, rep by Matt Pangaro)</li>
<li>watchdog: "status" returns watchdog-pid (#3768, rep by cyttesen)</li>
<li>watchdog: "status" queries Resin using HMTP/BAM for pid (#3768, rep by cyttesen)</li>
<li>watchdog: jvm-args are first in command-line to help 'ps' control (#3759, rep by Nathan Bardsley)</li>
<li>javac: use file.encoding as default encoding (#3719, rep by Shinomiya Nobuaki)</li>
<li>ejb: update EJBException serialization (#3779, rep by C Yttesen)</li>
<li>config: ${cluster} regression failure (#3842, rep by Jamie Novak)</li>
<li>database-pool: connection timing issues with multiple request (#3837, #3779, rep by Bryant Harris)</li>
</ul>
</s2>


<s2 title="4.0.3 - Jan 4, 2010">
<ul>
<li>mod_caucho: post/ack cleanup</li>
<li>hessian: allow custom URL connector with HessianProxy</li>
<li>hessian: avoid NPE on protocol corruption error (#3777, rep by Riccardo Cohen)</li>
<li>hessian: patch for GAE compatibility (rep by Jeff Schnitzer)</li>
<li>server: FileServlet handling of broken browser range requests (#3766, rep by Knut Forkalsrud)</li>
<li>cluster: hmux idle timeouts not properly handled (#3812, rep by Wesley Wu)</li>
<li>watchdog: race condition in log stream closing (#3807, rep by jnovak)</li>
<li>server: add logging to track down TempBuffer issues (#3807, rep by jnovak)</li>
<li>hessian: add UnsafeSerializer and deserializer</li>
<li>ejb: @SessionPool to configure maxIdle and maxConcurrent (#3739, rep by Jeff Schnitzer)</li>
<li>ejb: @PostConstruct not called on @Stateless (#3798, rep by voodude)</li>
<li>hessian: HessianProxyFactory needs to consistently use the ClassLoader instead of Thread.contextClassLoader() (#2860, rep by jghallen)</li>
<li>hessian: deserializer construct w/o calling constructors (#3357, rep by oehmiche)</li>
<li>hessian: reading of InputStream as object not properly dispatched (#3634, rep by mate)</li>
<li>hessian: string/binary encoding problems with 0x30-0x37 (#3690, rep by Adam Bryzak)</li>
<li>hessian: HessianSkeleton.createDebugPrintWriter created to allow debug override (#3646, rep by Peter Dettman)</li>
<li>hessian: add HessianProxyFactory.setConnectTimeout (#3658, rep by Patrik Stymne)</li>
<li>hessian: EnumSet deserialization (#3663, rep by danwatt)</li>
<li>server: hmux post/forward issues (#3793, rep by Jamison Novak and Wesley Wu)</li>
<li>server: hmux load balancer with incorrect protocol for short-response post (#3790, rep by Wesley Wu)</li>
</ul>
</s2>

<s2 title="4.0.2 - Nov 24, 2009">
<ul>
<li>resin-admin: fixed cluster page not loading graphs (#3805)</li>
<li>resin-admin: fixed pages does not respond to changing "Server:" error (#3806)</li>
<li>resin-admin: fixed jmx page exception on Mac OSX 10.6.2 (#3782)</li>
<li>resin.exe: fixed timeout issue when stopping resin(#3762)</li>
<li>resin: max-uri-length configuration tag introduced to set limit on URIs served by Resin. Default is 1024.</li>
<li>ubuntu: missing LSB information (#3720, rep by floating world)</li>
<li>jsp: findAncestorWithClass() fails with tags nested in a tag file(#3436, rep by paru)</li>
<li>security: add LoginList to allow both form and basic for /resin-admin REST (rep by Martin Thompson)</li>
<li>admin: add /resin-admin/rest.php?q=mod_status to duplicate Apache's REST interface (#3730, rep by Martin Thompson)</li>
<li>jsp: Faulty code generated for tag files with scriptlets (#3699, rep by daniel_larsson)</li>
<li>async: poll socket periodically to test for client exit (#3294, rep by Caleb Richardson)</li>
<li>(2009-10-28): BeanELResolver IllegalAccessException (#3727, rep on behalf of Kenneth Yeung)</li>
<li>(2009-10-22) encoding: JSP response character encoding can be specified at jsp group property level</li>
<li>(2009-10-12) encoding: default encoding is now set by file.encoding and defaults to utf-8 if no file.encoding exists</li>
<li>watchdog: add watchdog-log configuration (#3566, rep by Pedre Neves)</li>
<li>comet: wrapped request needs to work with comet (#3665, rep by Fiaz Hossain)</li>
<li>config: relaxng forbid duplicate rules (#3595, rep by hmh)</li>
<li>ssi: add basic SSI conditionals (#3534, rep by fly-away)</li>
<li>jpa: issue with @ManyToOne and MappedSuperclass (#3335, rep by rdhauwe)</li>
<li>vfs: paths with spaces in them caused trouble with class scanning and enhancement (#3574, rep by N. Shannon)</li>
<li>servlet: sendRedirect in filter with artifactory (#3416, rep by Jan Kriesten)</li>
<li>xml: XMLStream parsing for atlassian (#3651)</li>
<li>session: add cookie-use-context-path and cookie-path</li>
<li>loader: handle duplicate class definition errors (#3673, rep by Jamison Novak)</li>
<li>config: add ${server.address} and ${server.port} (#3671, rep by Ken Roach)</li>
<li>jsp: StaticMethodExpr needs serialization fix (#3677, rep by boris_kovalenko)</li>
<li>jsp: jsp:attribute in tag file (#3228, rep by jens)</li>
<li>log: update AbstractRolloverLog to eliminate long archive block (#3650, rep by Patrik Stymne)</li>
<li>candi: scope adapter left in debugging (#3675, rep by hontvari)</li>
<li>database: _idlePool and _pool must be synchronized together (#3660, rep by Shinomiya Nobuaki)</li>
<li>database: cleanup connection idle pooling (#3052)</li>
<li>admin: add database "Query Time" statistics (#3397, rep by Bryant Harris)</li>
<li>admin: add "database" tab to admin and improve configuration visibility (rep by Bill Au)</li>
<li>admin: add DatabaseMXBean and add getUrl() (#3664, rep by Bill Au)</li>
<li>configure: MacOS-X was not properly detecting JVMTI for profile (#3000, rep by Bryant Harris)</li>
<li>jsp: add CodeSigner for JSP class loader (#3657, rep by Kai Virkki)</li>
<li>http-proxy: enable load-balancing (#3068, rep by Zeke)</li>
<li>deploy: -preview now detaches server from load balancing (#3345)</li>
<li>ejb: session beans were not initialized in correct context (#3603, rep by Matthew Brew)</li>
<li>session: add "java" as a session serialization type (#3648, rep by Mattias Jiderhamn)</li>
<li>servlet: allow-forward-after-flush allows forward after response has been commited (feature) (#3580, rep by andrewm)</li>
<li>admin: add ping-url for server-independent ping testing (#3605, rep by John Bowen)</li>
<li>security: ClusterSingleSignon in cluster and host (#3467, rep by Scott Hernandez)</li>
<li>ejb: TimerService needs to be injectalbe (#3572)</li>
<li>ejb: ear scanning issues (#3583)</li>
<li>ejb: .ear manifest with class-path prevented detection of ejbs (#3601, rep by mbrew)</li>
<li>vfs: ReadStream.skip incorrectly updated index with negative skip (#3542, rep by Jamison Novak)</li>
<li>embed: add resetLogManager() and call it by default in ResinEmbed (#3530, rep by Daniel Lopez)</li>
<li>jpa: EntityManager.getDelegate() needs to create delegate if none exists (#3537, rep by voodude)</li>
<li>embed/maven: ResinEmbed.initializeEnvironment() must start JNDI (#3486, rep by Jan Kriesten)</li>
<li>admin: -agentlib:resin start cleanup (#3118 rep by bubek)</li>
<li>vfs: NotFoundPath (error:) needs to be able to lookup absolute paths (#3628, #3475, rep by kvirkki)</li>
<li>jsp: Jspc ant/maven task needs to disable resource-ref validation (#3577, rep by Boris Goykhman)</li>
<li>jpa: registration of EntityManagerFactory incorrect (#3429, rep by Scott Hernandez)</li>
<li>jpa: registration of PersistenceContext incorrect (#3622, rep by Jeff Schnitzer)</li>
<li>server: QDate isLeapYear using _year field instead of argument (#3512, rep by damaan)</li>
<li>amber: query maxResults issues (#3424, rep by Riccardo Cohen)</li>
<li>web-app: check error case where root-directory with .war expansion is same as root (#3535, rep by voodude)</li>
<li>security: request and SecurityContext isUserInRole share implementation (#3501, rep by skot)</li>
<li>cron: use getCurrentTime() consistently for Alarm (#3548, rep by mkenney)</li>
<li>ping: add freeze-timeout to PingThread configuration (#3592, rep by C. Karantzas)</li>
<li>mod_caucho: use load-balance-connect-timeout for mod_caucho (#3642)</li>
<li>xa: _transactionList rollback needs to be outside of synchronized (#3571, rep by jacky)</li>
<li>jni: user-name fix with 64-bit start (#3521, rep by norlab)</li>
<li>eclipse: server wizard cleanup and enhancement</li>
<li>eclipse: spaces in path (#3589, rep by Michael Ludwig)</li>
<li>eclipse: respect http port (#3502, rep by Michael Ludwig)</li>
<li>eclipse: invalid chars in hot deploy (#3503, rep by Michael Ludwig)</li>
<li>eclipse: deploy from temp directory (#3515, req by Yujin Kim)</li>
<li>eclipse: breakpoints (#3484, rep by Doug and sblommers)</li>
<li>embed: EmbedPort getLocalPort() returns ephemeral port (#3567, rep by zed)</li>
<li>xml: XMLStreamReaderImpl on bad input (#2989, rep by Bill Au)</li>
<li>servlet: footer/md5 HTTP handling (#3044, rep by Eric Bowman)</li>
<li>thread: ThreadPool cleanup (#3645, rep by Daniel Wigenfors)</li>
<li>jsp: BeanELResolver accessible issues (#3598, rep by rymsha)</li>
<li>deploy: staging and versioning capacilibies (#3514, rep by Yujin Kim)</li>
<li>cluster: add com.caucho.cluster.LockManager for distributed locking (#3464, rep by Martin Thompson)</li>
<li>build: jsf-api.jar needs to be in src distribution (#3633, rep by joey)</li>
<li>loader: sync/deadlock in EnvironmentClassLoader on startup (rep by Patrik Styme, #3641)</li>
<li>jms: ClusterQueue single consumer (#2766, rep by Eric Masson)</li>
<li>servlet: include/forward should not trigger request events (#3111, rep by tempestse)</li>
<li>http: refactor to eliminate buffer/session reuse for subsequent requests (#3557, rep by Kevin Kilmer-Choi)</li>
<li>servlet: forward attribute issues with wrappers (#3059, rep by masum)</li>
<li>server: content-length counting issues (#3619, rep by Matthew Schmidt)</li>
<li>jmx: IntrospectionMBean _attrGetMap needs to be synchronized (#3620, rep by ebarlas)</li>
<li>jsse: added jsse cipher-suite support (#3593, rep by vbavin)</li>
<li>jni: JNI detection of clientdisconnect issues (rep by Fiaz Hossain)</li>
<li>quercus: image fixes for vbulletin</li>
<li>quercus: ksort fixes for vbulletin</li>
<li>quercus: WordPress: Post revisions not shown (#3753)</li>
<li>quercus: Avoid recursive instropection of methods. (#3748, rep by PeterJ)</li>
<li>quercus: quercus request for support for $_SERVER["REQUEST_TIME"] (#3712, rep by ashamash)</li>
<li>quercus: Enable overridding of setting TYPE_SCROLL_INSENSITIVE (#3746, rep by PeterJ)</li>
<li>quercus: date_timezone_set does not update date correctly (#3737, rep by damien)</li>
<li>quercus: jetty: ClassNotFoundException for org.eclipse.jetty.server.AsyncContext (#3733, rep by andjarnic)</li>
<li>quercus: is_object and is_resource return wrong results in many cases (#3701, rep by PeterJ)</li>
<li>quercus: isset returns wrong answer with multiple variables (#3702, rep by PeterJ)</li>
<li>quercus: failure in simplexml_load_string() (#3476, rep by jredden)</li>
<li>quercus: quercus 4.0.1 is missing QuercusServlet (#3674, everflux)</li>
<li>quercus: phpBB3 - Links not displaying (#3637, rep by GT500)</li>
<li>quercus: java.lang.NullPointerException running Yii (#3541, rep by johnsavior)</li>
<li>quercus: Drupal and OpenID (#3609, rep by B. Wu)</li>
<li>quercus: QuercusParseException - missing semicolon within a scriptlet php tag. (#3668, rep by kenfoo)</li>
<li>quercus: StringBuilderValue.create() is not performing a "&amp; 0xFF" on the character value (#3654, rep by kenfoo)</li>
<li>quercus: ErrorException is missing (#3667, rep by kenfoo)</li>
<li>quercus: substr_compare failed (#3662, rep by jindw)</li>
<li>quercus: Quercus allows to make non-abstract function abstract again (#3644, rep by tlandmann)</li>
<li>quercus: count() error with recursive (#3586, rep by Hoang)</li>
<li>quercus: PHP-style hash algorithm names not supported (#3513, rep by koreth)</li>
<li>quercus: Quercus $foo->getClass() method (#3555, rep by Herbert)</li>
<li>quercus: NumberFormatException when calling $result = file_get_contents($url) (#3587, rep by tomi_m)</li>
<li>quercus: instanceof parsing precedence (#3621, rep by H. Punt)</li>
<li>quercus: isset() returns FALSE for $_SESSION (#3636, rep by rabbitism)</li>
<li>quercus: static function variables not "really" static (#3610, rep by tlandmann)</li>
<li>quercus: wordpress 2.8.1 and resin load-balancing - can't login (#3624, rep by J. Novak)</li>
<li>quercus: mail() does not handle multi-line headers properly (#3616)</li>
</ul>
</s2>

<s2 title="4.0.1">
<ul>
<li>session: save-mode='before-header' should not serialize sessions after the request (rep by Gagan Chaudhari)</li>
<li>server: chunking issues with filled content (rep by Rick Mann)</li>
<li>gzip: empty gzip response should return 0 bytes (#3599, rep by martin thompson)</li>
<li>jsp: jsp recompilation detection for WEB-INF/tags (#3578, rep by rmann)</li>
<li>(2009-07-14) jsf: ViewExpiredException with JSF RI(#3517, on behalf of Matthew Schmidt)</li>
<li>server: host-default and web-app-default were included multiple times (#3554, rep by Jean Padilla)</li>
<li>candi: scope-adapter bytecode issues with more than 3 arguments (#3564, rep by wesley)</li>
<li>xa: allow synchronization added in beforeCompletion to also be called by beforeCompletion (#3559, rep by Peter Pastrnak)</li>
<li>cache: jsp/include/html was not properly cached (#3379, rep by Driss Louriagli)</li>
<li>servlet: error page file-not-found is reporting the original URL, not the missing error page (#3561, rep by Abhishek Neralla)</li>
<li>watchdog: start can create a new task if the old one is in the process of shutting down (#3527, rep by Rob Lockston)</li>
<li>watchdog: stop needs to wait for Resin to exit (#3528, #3418, rep by Rob Lockstone)</li>
<li>watchdog: require "console" option, and forbid command-line without command</li>
<li>hessian: hessian 1.0/2.0 debug conflict for date ('d' vs \x4a) (#3452, rep by Rick Mann)</li>
<li>candi: multiple registration issue with @ApplicationScoped HessianService (#3543, rep by skot)</li>
<li>dist-session: open source wasn't properly saving (#3545, rep by Mattias Jiderhamn)</li>
<li>candi: resin-web.xml needs to override scanned beans (#3546, rep by voodude0</li>
<li>hessian: issues with 2 vs 1 version detection (#3036, rep by skipper13)</li>
<li>candi: stack overflow with EL config (#3480, rep by Scott Hernandez)</li>
<li>ejb: @Current SessionContext injection for stateful/session (#3506, rep by skot)</li>
<li>candi: increase priority of XML over discovered beans (#3507, rep by Jeff Schnitzer)</li>
<li>embed: ResinEmbed support for non-empty cluster and server names (#3498, rep by skot)</li>
<li>server: isUserInRole NPE in AbstractHttpRequest (#3489, rep by voodude)</li>
<li>build: ant dist build.xml optional for Makefile.in (#3490, rep by skot)</li>
<li>hessian: java.lang.Object (#3448)</li>
<li>hessian: Byte/Short as handles</li>
<li>jni: RandomAccessFile JNI code missing mode (#3442, rep by koreth)</li>
<li>jsp: jsp:useBean with generic type and XML validation (#3455, rep by kir)</li>
<li>jsp: prelude with include NPE (#3508, rep by Shinomiya Nobuaki)</li>
<li>deploy: error messages and documentation for remote deploy not clear for BAM/HMTP (#3477, rep by Scott Hernandez)</li>
<li>quercus: Curl has issues with urls having @ in it (#3585, rep by anash)</li>
<li>quercus: Wordpress 2.8.1 parent constructor call (#3597, rep by csw)</li>
<li>server: UTF8Reader with byte-order-mark needs to read full next character (#3525, rep by Fiaz Hossain)</li>
<li>jca: max-active-time default needs to changed to Long.MAX_VALUE instead of Integer.MAX_VALUE (rep by KC Baltz)</li>
<li>log: SyslogHandler has improper initialization (rep by Michael Glenney)</li>
<li>class loader: remove potential classloadering deadlock based on ClassEntry lock (#3423, rep by stbu)</li>
<li>database: driver support for META-INF/services and url without type</li>
<li>database: DataSource now allowed as a driver type (#3318, rep by atifmk)</li>
<li>server: web-app versioning updates with /ROOT (#3466, rep by sibyj)</li>
<li>server: HTTP PrintWriter with i18n double-byte encoding overrun (#3434, rep by Fiaz Hossain)</li>
</ul>
</s2>

<s2 title="4.0.0 - May 5, 2009">
<ul>
<li>security: ClusterSingleSignon logging wrong class (rep by Scott Hernandez)</li>
<li>thread pool: improve detection of illegal internal thread state (rep by Takahiro Fukuda)</li>
<li>(2008-04-08) thread: ThreadPool initialization needs to be synchronized because of lazy-init (rep by Dannis Devota)</li>
<li>jsp: BeanInfo vs introspection for tags (#3066, rep by Mike McNally)</li>
<li>classloader: maven classloader replaces osgi</li>
<li>jsp: trimDirectiveWhitespaces was ignored for tag files (#3386, rep by kvirkki)</li>
<li>admin: PingMailer updated to Java Injection (#3257, rep by kenjrwalker)</li>
<li>session: timeout/listener updates (#3116, rep by Richard Grantham)</li>
<li>rewrite: &lt;dispatch> needs to change Invocation (#3067, rep by Leonid Geller)</li>
<li>admin: sort_webapp duplicate error in /resin-admin (#3405, rep by c. whalley)</li>
<li>ioc: add @Produces foo(InjectionPoint ij)</li>
<li>jsp: UTF-8 BOM should not force text/html (#3062, rep by CnXiaowei)</li>
<li>proxy-cache: Authorization header should not disable proxy caching (#3065, rep by Daniel Wigenfors)</li>
<li>servlet: sendRedirect URL encoding to use iso-8859-1 when character encoding set (#3032, rep by bjopet)</li>
<li>hessian: timeout on http connection clear needs to be short (#3039, rep by Jeff Porter)</li>
<li>http: improve error message on chunked encoding (#3021, rep by e_rajasekar)</li>
<li>error: allow custom error page for 400 bad request errors (#3008, rep by Vinod Mehra)</li>
<li>jsp: error parsing should ignore encoding errors (#2967, rep by Takahiro Fukuda)</li>
<li>load balance: dynamic servers (#2867, rep by Dana P'Simer)</li>
<li>load balance: add green load balancing (#2831)</li>
<li>admin: added URL to thread dump when available (#3194, rep by Keith Paulson)</li>
<li>win32: O_BINARY required for configuation saving (#3337, rep by Takahiro Fukuda)</li>
<li>log: non-gz/zip archiving now uses rename instead of copy</li>
<li>log: added ${request}, ${session}, ${cookie} to log format (#3255, rep by Philippe Collard)</li>
<li>log: multiline logs like thread dumps should not have extra timestamps (#3229, rep by Jamison Novak)</li>
<li>rewrite: &lt;dispatch> should not modify uri unless it has a target (#3295, rep by Ethan Larson)</li>
<li>distcache: distributed cache update times must be deltas because of clock skew (#3161, rep by Dushyanth Harinath)</li>
<li>jms: commit() NPE check (#3287, rep by tyson weihs)</li>
<li>rewrite: new rewrite rules allow custom dispatching (#3096, rep by Leonid Geller)</li>
<li>rewrite: &lt;rewrite:SetHeader>,&lt;rewrite: Location> (#3381, rep by Andrea Sodomaco)</li>
<li>rewrite: request-secure disabled access log (#3354, rep by Tamas Pinter)</li>
<li>security: &lt;secure> interaction with auth-constraint (#3333, rep by stbu)</li>
<li>servlet: add &lt;cron> syntax for servlet (#3188, rep by mate)</li>
<li>boot: update setuid/setgid code (#3330, rep by tlandmann)</li>
<li>quercus: charAt needs to check range (#3363, rep by gyvc)</li>
<li>boot: improve bind error messages for failed binding (#3193, #3204, rep by sibyj)</li>
<li>dist: init.d/resin.in distribution changes (#3374, rep by jkriesten)</li>
<li>(2009-03-18) mod_caucho: only allow one thread to update config for worker model</li>
<li>win32: truncate applied incorrect file mode for new file (#3382, rep by Kair Virkki)</li>
<li>(2009-02-26) boot: windows machines can't add -server option automatically (#3331)</li>
<li>inject: findByName needs to work during shutdown (#3334, rep by stbu)</li>
<li>make: "make clean" not properly propagated in modules/c/src/Makefile (#3340, rep by copart)</li>
<li>boot: add system-class-loader configuration (#3339, rep by toomasr)</li>
<li>servlet: run-at race condition on web-app restart (rep by stbu, #3342)</li>
<li>boot: update messages for Quercus Personal (#3352)</li>
<li>quercus: $f($v) with foo(&amp;$v) declaration (#3351, rep by koreth)</li>
<li>(2009-02-23) jms: btree split off-by-one issue (#3287, rep by tyson weihs)</li>
<li>jms: file missing primary declaration (#3287, rep by tyson weihs)</li>
<li>hessian: Annotation support</li>
<li>hessian: AbstractSerializer changes to improve usability</li>
<li>hessian: META-INF/hessian/serializers and deserializers</li>
<li>server: sync performance with Encoding (#3226, rep by lookis)</li>
<li>quercus: hmac performance (#3297, rep by koreth)</li>
<li>server: cron syntax not properly handling day of week (#3248, rep by mate)</li>
<li>mod_caucho: content-length not properly propagated (#2995, rep by uwe schaefer)</li>
<li>(2009-01-27) inject: update packaging to latest Java Injection draft</li>
<li>make: makefiles updated to use $(CC) instead of $(LD) (#3267, rep by dicr)</li>
<li>admin: add &lt;resin-data-directory> to replace admin path</li>
<li>remote: &lt;remote:BamService> replaces &lt;bam-service></li>
<li>quercus: batch compiled files (#3261, rep by koreth)</li>
<li>quercus: strtotime with date and not time needs to zero-out time (#3177, rep by dmaa)</li>
<li>quercus: FilterIterator (#3214, rep by koreth)</li>
<li>quercus: stub out CURLOPT_MAXREDIRS (#3126, rep by koreth)</li>
<li>quercus: double printing needs to match php (#3279, rep by koreth)</li>
<li>quercus: curl CURLOPT_POSTFIELDS needs to understand array (#3281, rep by koreth)</li>
<li>quercus: microtime() was using System.nanos() incorrectly (#3280, rep by koreth)</li>
<li>quercus: date() not using default timezone (#3273, rep by koreth)</li>
<li>quercus: pwd not working properly in passthru (#3247, rep by mikhailb)</li>
<li>quercus: get_object_vars must not use iterator (#3253, rep by haplo)</li>
<li>quercus: Java interfaces not properly populating instanceof (#3230, rep by haplo)</li>
<li>quercus: ArrayIterator constructor issues (#3239, #3253, rep by haplo)</li>
<li>quercus: instanceof not working with Java classes (#3242, rep by haplo)</li>
<li>quercus: static variables related to late static binding (#3225, rep by koreth)</li>
<li>osgi: getLocalResource needs to check for loader null (#3236, rep by koreth)</li>
<li>jsf: f:view not bound when using jsf:ri with xml syntax (#3102, rep by alex)</li>
<li>(2008-01-05) quercus: instanceof issues with Exceptions (#3209, rep by koreth)</li>
<li>quercus: regexp handling of /[\p{Arabic}]/ (#3131, rep by koreth)</li>
<li>quercus: classes scope to the dynamic class, not static class (#3213, rep by koreth)</li>
<li>quercus: abstract class not properly initialized in statement (#3216, rep by koreth)</li>
<li>quercus: i18n issues with "set names" (#3203, rep by M Schmidt)</li>
<li>quercus: array copyOnWrite issue with _var vs _value (#3210, rep by koreth)</li>
<li>quercus: array return value from external call (#347b, rep by koreth)</li>
<li>quercus: json_decode of '{}' not handled properly, cont (#3201, rep by koreth)</li>
<li>(2008-12-29) quercus: json_decode of '{}' not handled properly (#3197, rep by koreth)</li>
<li>quercus: add profile-probability="0.001" to QuercusServlet (#3200, rep by koreth)</li>
<li>quercus: NPE for preg_match and "/^x|^x/" (#3198, rep by koreth)</li>
<li>security: add WebBeans-style configuration, e.g. &lt;sec:FormLogin>, &lt;sec:XmlAuthenticator</li>
<li>session: convert to TriplicateCache</li>
<li>cluster: convert to ClusterTriad</li>
<li>watchdog: convert to BAM</li>
<li>quercus: regexp needs to handle anchor optim (#3195, rep by koreth)</li>
<li>install: Mac OS X flags for 64 bit</li>
<li>security: authentication generation of cookies should be optional (#3049, rep by Eric Bowman)</li>
<li>gzip: if application sets Vary, do not add extra Vary (#3043, rep by Eric Bowman)</li>
<li>config: Resin config vars like ${server} should not affect JSP EL (#3078, rep by Jan Kriesten)</li>
<li>jmx: remove admin-dummy-root for remote service (#3087, rep by dicr)</li>
<li>jstl: ${cookie.foo} with no cookies causes NPE (#3023, rep by vicsanca)</li>
<li>session: SessionManager.createSession check for initialization (#3074, rep by dicr)</li>
<li>boot: watchdog communication proxy not setting proper classloader (#3174, rep by koreth)</li>
<li>amber: @ManyToOne issue with @JoinColumn not specifying name (#3081, rep by dicr)</li>
<li>amber: @Version fixes for java.sql.Timestamp (#3080, rep by dicr)</li>
<li>config: webApp.url should default to http://localhost instead of http://default (#3035, rep by skipper13)</li>
<li>config: resin:import will throw config exception is include file exists bug is not readable (#3076, rep by dicr)</li>
<li>server: reduce default BlockManager size (#3054, rep by Daniel Vydra)</li>
<li>amber: @Entity wasn't allowing protected constructor (#3071, rep by dicr)</li>
<li>admin: log-service default changed to 'warning' (#3084, rep by Bryant Harris)</li>
<li>build: debian web user should be 'www-data' (#3124, rep by Geert Van Damme)</li>
<li>quercus: $GLOBALS array regression (#3176, rep by koreth)</li>
<li>quercus: compress.zlib parsing error (#3171, rep by koreth)</li>
<li>quercus: $_SERVER and $HTTP_SERVER_VARS not identical (#3168, rep by koreth)</li>
<li>quercus: stream_get_meta_data extra logging (#3170, rep by koreth)</li>
<li>quercus: class static fields must be handled as mangled globals (#3155, #3165, rep by koreth)</li>
<li>quercus: DoubleValue issues in assignments, e.g. for commas (#3163, rep by koreth)</li>
<li>quercus: array copy-on-write issues with latest optimizations (#3160, rep by koreth)</li>
<li>quercus: unset compilation issues with latest optimizations (#3157, rep by koreth)</li>
<li>jsf: invalid input is not redisplayed in JSF UI Input (#3057, rep by freemant)</li>
<li>quercus: resin_save_state()/resin_restore_state() (rep by koreth)</li>
<li>server: 304 was not properly ignoring content (#3089, rep by Andrew Phillips)</li>
<li>quercus: catch regexp stack overflow and log (rep by koreth)</li>
<li>quercus: array_shift regression (#3150, rep by koreth)</li>
<li>quercus: array($x = 3) compilation issue (#3139, rep by koreth)</li>
<li>quercus: experimental lazy function classloading (rep by koreth)</li>
<li>quercus: NPE with func_get_args (#3103, rep by koreth)</li>
<li>core: added StreamSource for hessian serialization</li>
<li>hessian: added AbstractStreamSerializer and AbstractStreamDeserializer</li>
<li>hessian: added *HessianSerializer and *HessianDeserializer pattern</li>
<li>jsf: Application MessageBundle fixes (#3056, rep by freemant)</li>
<li>jsf: JSF State with Serializable ActionListener (#3058, rep by freemant)</li>
<li>server: ThreadLocal removal/cleanup</li>
<li>admin: change profile default to 10ms</li>
<li>http: 304 should not return content-length (#3089, rep by Andrew Phillips)</li>
<li>admin: changed log-service default logging level to WARNING (rep by Bryant Harris)</li>
<li>memory: DispatchRequest._invocation needs to be cleared (rep by Mattias Jiderhamn)</li>
<li>session: clustering triplicate='true' with only one server (rep by Mark Morgan)</li>
<li>database: NPE in ConnectionPool.destroy() (#3070, rep by dicr)</li>
<li>thread: thread pool load smoothing (rep by Martin Thompson)</li>
<li>boot: watchdog kill NPE (#3009, rep by stbu)</li>
<li>persistent-store: sessions larger than 4M were not properly persisted (#3025, rep by mate)</li>
<li>memory: removed potential ThreadLocal leak with SecurityContext (#3031, rep by Mattias Jiderhamn)</li>
<li>admin: OSGi bundles now registered as OsgiBundleMXBean</li>
<li>admin: WebBeans now registered as WebBeanMXBean</li>
<li>Servlet: various fixes for Servlet TCK</li>
<li>JSP: various fixes for JSP TCK</li>
<li>WebBeans: javax.webbeans.manager.Manager and Bean are new SPI for WebBeans</li>
<li>WebBeans: @Current replaces @In as default @BindingType</li>
<li>WebBeans: &lt;Deploy> enables @DeploymentType and establishes priority</li>
<li>WebBeans: @DeploymentType replaces old @ComponentType</li>
<li>WebBeans: @Named semantics changes for new draft - Named is no longer a @BindingType and no longer automatically names beans</li> 
<li>WebBeans: move web-beans.xml to root from META_INF for new draft</li>
<li>WebBeans: new XML web-beans.xml syntax for new draft</li>
</ul>
</s2>

<p>
<a href="changes-3.xtp">Resin 3 changes</a>
<a href="changes-31.xtp">Resin 3.1 changes</a>
<a href="changes-2.xtp">Resin 1.2 changes</a>
<a href="changes-1.xtp">older changes</a>
</p>
</s1>
</body>
</document>
