While working on the XSS problem,
<a href="https://embeddedtst.eecs.berkeley.edu:448/embeddedj/resetpassword.jsp"><code>https://embeddedtst.eecs.berkeley.edu:448/embeddedj/resetpassword.jsp</code></a> came up with
<pre>
Apache Tomcat/4.0.4 - HTTP Status 404 - /embeddedj/resetpassword.jsp

type Status report

message /embeddedj/resetpassword.jsp

description The requested resource (/embeddedj/resetpassword.jsp) is not available.
</pre>

<code>catalina.out</code> said
<blockquote>
<code>org.xml.sax.SAXParseException: The content of element type "web-app" must match "(icon?,display-name?,description?,distributable?,context-param*,filter*,filter-mapping*,listener*,servlet*,servlet-mapping*,session-config?,mime-mapping*,welcome-file-list?,error-page*,taglib*,resource-env-ref*,resource-ref*,security-constraint*,login-config?,security-role*,env-entry*,ejb-ref*,ejb-local-ref*)".
</code>
<p><code>2008-12-20 19:01:17 ContextConfig[/embeddedj]: Occurred at line 191 column 11</code>
<p><code>2008-12-20 19:01:17 ContextConfig[/embeddedj]: Marking this application unavailable due to previous error(s)</code>
<p><code>2008-12-20 19:01:17 StandardContext[/embeddedj]: Error initializing naming context for context /embeddedj</code>
<p><code>2008-12-20 19:01:17 StandardContext[/embeddedj]: Context startup failed due to previous errors</code>
<p><code>2008-12-20 19:01:17 StandardContext[/embeddedj]: Error initializing naming context for context /embeddedj
</code>

</blockquote>
However, if I remove the text below from <code>web.xml</code>, then it works again.
<pre>
    &lt;filter&gt;
    &lt;filter-name&gt;XSS&lt;/filter-name&gt;
        &lt;display-name&gt;XSS&lt;/display-name&gt;
        &lt;description&gt;&lt;/description&gt;
        &lt;filter-class&gt;gsrc.util.xssfilter.CrossScriptingFilter&lt;/filter-class&gt;
    &lt;/filter&gt;
    &lt;filter-mapping&gt;
        &lt;filter-name&gt;XSS&lt;/filter-name&gt;
        &lt;url-pattern&gt;/*&lt;/url-pattern&gt;
    &lt;/filter-mapping&gt;
</pre>

It turns out that <b>order matters</b>
Running
<p><code>xmllint -dtdvalid http://java.sun.com/dtd/web-app_2_3.dtd ~/java/gigascale/WEB-INF/web.xml
</code>
yields
<p>
<code>/home/www/java/gigascale/WEB-INF/web.xml:9: element web-app: validity error : Element web-app content does not follow the DTD, expecting (icon? , display-name? , description? , distributable? , context-param* , filter* , filter-mapping* , listener* , servlet* , servlet-mapping* , session-config? , mime-mapping* , welcome-file-list? , error-page* , taglib* , resource-env-ref* , resource-ref* , security-constraint* , login-config? , security-role* , env-entry* , ejb-ref* , ejb-local-ref*), got (display-name filter filter-mapping context-param listener servlet servlet servlet servlet servlet servlet servlet-mapping taglib taglib taglib taglib taglib taglib taglib taglib )
Document /home/www/java/gigascale/WEB-INF/web.xml does not validate against http://java.sun.com/dtd/web-app_2_3.dtd
</code>
<p>The solution is to put the <code>filter</code> text
after the <code>context</code> section.


<h3>WorkshopRegistration not available</h3>
While setting up workshop registration, trying to view
<a href="http://embedded.eecs.berkeley.edu/gsrcj/servlet/WorkshopRegistration?workshopID=2"><code>http://embedded.eecs.berkeley.edu/gsrcj/servlet/WorkshopRegistration?workshopID=2</code></a>:

<pre>
HTTP Status 404 - /gsrcj/servlet/WorkshopRegistration

type Status report

message /gsrcj/servlet/WorkshopRegistration

description The requested resource (/gsrcj/servlet/WorkshopRegistration) is not available.
Apache Tomcat/4.1.39-LE-jdk14
</pre>

Also, <code>catalina.out</code> contained
<pre>
0 active IDs
</pre>
which comes from <code>src_testrelease/javapages/common/gsrc/workshop/WorkshopTheme.java</code>.  However, that
seems to be a red herring as the code that prints the message is not obviously failing.

<p>The problem was that we were referring to 
<code>gsrcj</code> instead of <code>embeddedj</code>
<p>The fix was to edit <code>/home/www/java/embedded/editworkshop.jsp</code> and <a href="http://embedded.eecs.berkeley.edu/dopsysadmin/faq/101.html">Restart Tomcat</a>.

<p>Also, <code>/home/www/src_testrelease/javapages/embedded/gsrc/workshop/editworkshop.jsp</code> was edited and checked in.