================================================================================
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

      http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
================================================================================

$Id$

                         =================================
                         Apache Tomcat 6.0 Patch Proposals
                         =================================


RELEASE SHOWSTOPPERS:


PATCHES ACCEPTED TO BACKPORT:
  [ start all new proposals below, under PATCHES PROPOSED. ]

PATCHES PROPOSED TO BACKPORT:
  [ New proposals should be added at the end of the list ]

* Backport cleanup of semantics of thisAccessedTime and
  lastAccessedTime for sessions:
  - preparational whitespace changes
    http://svn.apache.org/viewvc?rev=711695&view=rev
  - Give thisAccessedTime and lastAccessedTime for sessions
    a clear semantics:
    http://svn.apache.org/viewvc?rev=711711&view=rev
    - thisAccessedTime will be updated at the beginning and
      at the end of session use
    - lastAccessedTime will only be updated at the end of
      session use
    This means:
    - lastAccessedTime is the last access time of a session
      disregarding any request still being processed on.
      So this is good to use even from within a request
      to detect when its own session has been used last before.
    - thisAccessedTime already gets updated when a new request
      disregarding any request still being processed on.
      So this is better for any idleness check or information.
    - thisAccessedTime >= lastAccessedTime always
  - Port from StandardSession to DeltaSession
    http://svn.apache.org/viewvc?rev=711714&view=rev
  - Expose thisAccessedTime via the session interface
    and ManagerBase, so we can use it from outside the session.
    http://svn.apache.org/viewvc?rev=711716&view=rev
  - Make the classes checking session idleness use thisAccessedTime.
    http://svn.apache.org/viewvc?rev=711720&view=rev
    This is not for invalidation, only for displaying
    idle times and making persistance decisions.
  +1: rjung
   0: billbarker: generally agree with remm that this is too big of a change for the stable branch
                 but could agree to some of it if it was split into parts
   0: markt: Agree with Bill - smaller parts would be better
  -1: remm: no for TC 6.0
  -1: funkman : api change in Session.java for .x.x release


* Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=47774
  Ensure web application class loader is used when calling session listeners
  http://svn.apache.org/viewvc?rev=890530&view=rev
  http://svn.apache.org/viewvc?rev=892193&view=rev
  +1: markt
  -1: 
   0: kkolinko:
       Re approach:
         Request.isRequestedSessionIdValid() serves as implementation for
         HttpServletRequest.isRequestedSessionIdValid().
         I think that ClassLoader should already be set when calling this
         method.

         I mean, the problem is elsewhere. Supposedly in CoyoteAdapter.
         parseSessionCookiesId(), but may be earlier in the call chain.

         I won't oppose the patch. I have to think a bit more about it.

* Fix second part of https://issues.apache.org/bugzilla/show_bug.cgi?id=47413#c8
  Coerce result of composite EL expression (${a}${b}) from String to the expected type.
  The example demonstrating it was added in r892968.
  http://svn.apache.org/viewvc?rev=893001&view=rev
  +1: kkolinko
  -1:

* Enforce presence of charset in content-type header of textual mime-types in the Examples webapp
  step 1) copy AddDefaultCharsetFilter from trunk
   mkdir "java/org/apache/catalina/filters"
   svn add "java/org/apache/catalina/filters"
   svn copy https://svn.apache.org/repos/asf/tomcat/trunk/java/org/apache/catalina/filters/AddDefaultCharsetFilter.java java/org/apache/catalina/filters/
  step 2) merge r893496 from trunk
   http://svn.apache.org/viewvc?rev=893496&view=rev
  +1: kkolinko
  -1: