resin 3.2.1 release notes

Resin 3.2.x is now the development branch. Due to the addition of new features, it may be more unstable than the production branch.

The 3.1.x branch is the stable branch.

mod_caucho includes fixes for a potential denial-of-service issue with bogus virtual hosts. The symptoms include an exceptionally large /tmp/localhost_6800 file. Workarounds for previous versions involve deleting the /tmp/localhost_6800 file and restarting Resin.

Resin 3.2.1 includes a fix for a potential XSS issue with UTF-7 encoding.

The 3.2.1 release of Quercus includes a large number of bug fixes, including 88 listed in the Quercus ChangeLog.

Quercus now runs Moodle, a popular educational framework.

The internal support for Comet and Keepalives have been significantly reworked, further improving Comet performance in long-polling configurations. Since these changes affect all requests, Comet and non-comet, these changes have the largest chance of added instability.

The new comet changes include initial support for Servlet 3.0 Comet API. Both Servlet 3.0 Comet API and Resin's native Comet API are supported.

Significant updates to the Hessian 2.0 draft protocol, improving the efficiency and simplicity of the bytecode allocation. These changes are all internal to the protocol itself, so users will not notice any API changes. However, clients and servers must both use the most recent draft since earlier versions are not compatible.

Resin 3.2.1 includes an OSGi server integrated with Resin's WebBeans and embedded in the standard Resin environment. OSGi bundles are automatically loadable from Ivy repositories and can export to the local web-app.

• Basic OSGi implementation.
• OSGi/Ivy integration
• OSGi/WebBeans integration