olivier lamy
63810134c7
do not use hardcoded port
...
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-24 16:33:04 +10:00
olivier lamy
d295aa6d63
run this test using testcontainers only if docker is available
...
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-24 16:33:04 +10:00
Jan Bartel
6d8ae9cafe
Issue #6085 Fix reference counts for multiple valid cookies for sessions ( #6088 )
...
* Issue #6085 Fix reference counts for multiple valid cookies for sesssions
Signed-off-by: Jan Bartel <janb@webtide.com>
2021-03-24 13:31:36 +11:00
Joakim Erdfelt
37fffb1722
Merge pull request from GHSA-j6qj-j888-vvgq
...
Ensure that WebAppProvider Filter always canonicalises the file passed in from the Scanner. Thus, both the monitored directory is canonical as well as the file it is being compared against.
Signed-off-by: Greg Wilkins <gregw@webtide.com>
Co-authored-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 01:18:40 +01:00
Greg Wilkins
e412c8a15b
Merge pull request from GHSA-v7ff-8wcx-gmc5
...
Always normalize ambiguous URIs
Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 01:10:28 +01:00
Simone Bordet
294b2ba02b
Fixes #6072 - jetty server high CPU when client send data length > 17408.
...
Updates after review.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-22 23:24:37 +01:00
Joakim Erdfelt
00d379c94b
Fixes #6072 - jetty server high CPU when client send data length > 17408.
...
Avoid spinning if the input buffer is full.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
Co-authored-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-22 23:24:37 +01:00
Lachlan
6b341908cc
Merge pull request #6056 from eclipse/jetty-9.4.x-6050-WebSocket-NotUft8Exception
...
Issue #6050 - fix bug for permessage deflate buffer aggregation
2021-03-17 21:36:02 +11:00
Lachlan Roberts
2c5ab59c9d
Issue #6050 - use compressed and decompressed as variable names
...
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-17 19:03:10 +11:00
Joakim Erdfelt
f92394e748
Merge pull request #6053 from eclipse/jetty-9.4.x-client-hybrid-smaller
...
Issue #6052 - make ModuleLocation optional on Android
2021-03-15 11:58:51 -05:00
Joakim Erdfelt
9e29832a8a
Issue #6052 - Applying changes from review
...
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-15 09:22:04 -05:00
Joakim Erdfelt
a3a1478c91
Issue #6052 - Removing MethodHandle from TypeUtil static initializer
...
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-15 09:05:25 -05:00
Lachlan Roberts
2f2b6ba8be
Issue #6050 - add comment and change variable name to clarify
...
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-11 11:49:38 +11:00
Joakim Erdfelt
d7982f869b
Issue #6052 - make ModuleLocation optional on Android
...
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-10 10:45:29 -06:00
Lachlan Roberts
c8dd4cdaeb
Issue #6050 - fix bug for permessage deflate buffer aggregation
...
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-10 21:30:43 +11:00
Olivier Lamy
b899261497
fix some mod files: some url using http to https, use maven central if possible, upgrade log4j2 to 2.14.0 ( #6048 )
...
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-10 19:12:47 +10:00
Simone Bordet
132f4b9ab1
Fixes #6034 - SslContextFactory may select a wildcard certificate during SNI selection when a more specific SSL certificate is present.
...
Now matching certificates are sorted, non-wildcard first, so that a more specific alias is returned.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-09 09:55:44 +01:00
Joakim Erdfelt
367cd7b4c6
Adding CVE-2020-27223 reference to VERSION.txt
...
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-04 09:15:32 -06:00
Joakim Erdfelt
03f7a0cbc0
Merge remote-tracking branch 'origin/release-9.4.38' into jetty-9.4.x
2021-03-04 09:12:26 -06:00
Jan Bartel
01ee48cda3
Issue #6004 Add redirect for configure_9_3.dtd to XmlParserTest ( #6015 )
...
Signed-off-by: Jan Bartel <janb@webtide.com>
2021-02-27 14:37:36 +01:00
gregw
88a69b8f67
updated CVE
...
Signed-off-by: gregw <gregw@webtide.com>
2021-02-27 09:23:41 +01:00
Chris Walker
6e6574e92d
Update Version.txt with CVEs ( #6014 )
...
Adds CVEs to Version.txt
2021-02-25 15:59:18 -06:00
Joakim Erdfelt
5fed958e08
Updating to version 9.4.39-SNAPSHOT
2021-02-24 14:52:43 -06:00
Joakim Erdfelt
288f3cc745
Updating to version 9.4.38.v20210224
2021-02-24 14:16:09 -06:00
Joakim Erdfelt
0603b1337b
Merge pull request #6005 from eclipse/jetty-9.4.x-6001-default-accept-ambiguous-uris
...
Fix #6001 separate compliance modes for ambiguous URI segments, params and separators
2021-02-24 14:12:05 -06:00
Joakim Erdfelt
e68293ef4e
Addressing copy/paste mistakes
...
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-02-24 12:47:48 -06:00
gregw
f9b5974ded
Fix #4275 separate compliance modes for ambiguous URI segments and separators
...
default modes allows both ambiguous separators and segments, but still forbids ambiguous parameters
2021-02-24 19:17:49 +01:00
Greg Wilkins
49e73dfb75
Fix #4275 #6001 separate compliance modes for ambiguous URI segments and se… ( #6003 )
...
Fix #4275 separate compliance modes for ambiguous URI segments and separators
2021-02-24 10:05:05 +01:00
Simone Bordet
c9cd1e4758
Merge pull request #5995 from eclipse/jetty-9.4.x-5994-qtp_free_threads
...
Fixes #5994 - QueuedThreadPool "free" threads
2021-02-24 09:31:03 +01:00
Greg Wilkins
8bd4a9fad8
Fix #5999 ArrayIndexOutOfBounds for unicode in HttpURI segment ( #6000 )
...
Fixed ArrayTrie to not throw if passed a unicode character.
2021-02-23 20:03:45 +01:00
Simone Bordet
530c14e7b3
Issue #5994 - QueuedThreadPool "free" threads
...
Updates after review.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-02-23 18:12:55 +01:00
gregw
16241d7fcb
Efficiency improvements for #5977
...
Improve efficiency for non wrapped response for cache-contro
2021-02-23 13:09:02 +01:00
gregw
fdb54fa2fb
Efficiency improvements for #5977
...
Improve efficiency for non wrapped response for cache-contro
2021-02-23 13:06:50 +01:00
Greg Wilkins
c0b0f80567
Efficiency improvements for #5977 ( #5998 )
...
Improve efficiency for non wrapped response for cache-contro
2021-02-23 12:56:22 +01:00
olivier lamy
b836c2fda3
add test for fix containsHeader test when it is not instance of Response, Issue #5977 was partially fixed
...
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-23 10:32:00 +10:00
olivier lamy
38ef4009b9
fix containsHeader test when it is not instance of Response, Issue #5977 was partially fixed
...
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-23 10:01:53 +10:00
Simone Bordet
64e01beeeb
Fixes #5994 - QueuedThreadPool "free" threads
...
Introduced to QueuedThreadPool:
* getMaxReservedThreads()
* getAvailableReservedThreads()
* getAvailableThreads()
* getReadyThreads()
* getLeasedThreads()
Also few small code cleanups.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-02-22 23:02:12 +01:00
Joakim Erdfelt
ea2a76ed3b
Updating to version 9.4.38-SNAPSHOT
2021-02-19 09:44:28 -06:00
Joakim Erdfelt
27afab2bd3
Updating to version 9.4.37.v20210219
2021-02-19 09:03:57 -06:00
olivier lamy
0423ad36c1
use jackson-databind 2.9.10.7
...
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-19 09:33:59 +10:00
Joakim Erdfelt
bbcae23774
Merge pull request #5494 from eclipse/jetty-9.4.x-5492-java-features-start-properties
...
Issue #5492 - Adding java.features.* start properties
2021-02-18 16:04:39 -06:00
Joakim Erdfelt
7abd46032b
Merge pull request #5947 from eclipse/jetty-9.4.x-dependency-ant-in-antrun
...
Updating ant version in our maven plugin usages
2021-02-18 11:28:03 -06:00
Joakim Erdfelt
f2bed1368b
Issue #5492 - changed from review
...
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-02-18 11:14:54 -06:00
Joakim Erdfelt
2aa1a68079
Merge remote-tracking branch 'origin/jetty-9.4.x' into jetty-9.4.x-5492-java-features-start-properties
2021-02-18 10:55:34 -06:00
Greg Wilkins
324ab668de
More optional etag gzip fixes for #5979 ( #5986 )
...
* More optional etag gzip fixes for #5979
IF no separator defined, do not add a suffix to an etag.
Some cleanup of the implementation.
* More optional etag gzip fixes for #5979
updates from review
2021-02-18 17:24:16 +01:00
Joakim Erdfelt
a5c8fee872
Merge pull request #5976 from eclipse/jetty-9.4.x-new-header-rules
...
Adding requested Rewrite Rule to force request header values
2021-02-18 07:27:59 -06:00
Joakim Erdfelt
10e531756b
Merge pull request from GHSA-m394-8rww-3jr7
...
Use comparator based sort
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
Signed-off-by: gregw <gregw@webtide.com>
Co-authored-by: gregw <gregw@webtide.com>
2021-02-18 14:14:38 +01:00
Olivier Lamy
addfbe81c1
Issue #5977 do not force Cache-Control header if already set ( #5978 )
...
* Issue #5977 do not force Cache-Control header if already set
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-18 07:29:24 +10:00
Greg Wilkins
a8b4927427
Fix #5979 by allowing a configurable etag separator. ( #5980 )
...
* Fix #5979 by allowing a configurable etag separator.
Fix #5979 by allowing a configurable etag separator
* updates from review
* Updates from review
Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-02-17 22:19:23 +01:00
Simone Bordet
70d6724d93
Merge pull request #5974 from eclipse/jetty-9.4.x-5973-proxy_client_tls_auth_example
...
Fixes #5973 - Proxy client TLS authentication example.
2021-02-17 18:32:35 +01:00