Commit Graph

18976 Commits

Author SHA1 Message Date
olivier lamy 63810134c7 do not use hardcoded port
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-24 16:33:04 +10:00
olivier lamy d295aa6d63 run this test using testcontainers only if docker is available
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-24 16:33:04 +10:00
Jan Bartel 6d8ae9cafe
Issue #6085 Fix reference counts for multiple valid cookies for sessions (#6088)
* Issue #6085 Fix reference counts for multiple valid cookies for sesssions

Signed-off-by: Jan Bartel <janb@webtide.com>
2021-03-24 13:31:36 +11:00
Joakim Erdfelt 37fffb1722
Merge pull request from GHSA-j6qj-j888-vvgq
Ensure that WebAppProvider Filter always canonicalises the file passed in from the Scanner. Thus, both the monitored directory is canonical as well as the file it is being compared against.

Signed-off-by: Greg Wilkins <gregw@webtide.com>

Co-authored-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 01:18:40 +01:00
Greg Wilkins e412c8a15b
Merge pull request from GHSA-v7ff-8wcx-gmc5
Always normalize ambiguous URIs

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 01:10:28 +01:00
Simone Bordet 294b2ba02b Fixes #6072 - jetty server high CPU when client send data length > 17408.
Updates after review.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-22 23:24:37 +01:00
Joakim Erdfelt 00d379c94b Fixes #6072 - jetty server high CPU when client send data length > 17408.
Avoid spinning if the input buffer is full.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
Co-authored-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-22 23:24:37 +01:00
Lachlan 6b341908cc
Merge pull request #6056 from eclipse/jetty-9.4.x-6050-WebSocket-NotUft8Exception
Issue #6050 - fix bug for permessage deflate buffer aggregation
2021-03-17 21:36:02 +11:00
Lachlan Roberts 2c5ab59c9d Issue #6050 - use compressed and decompressed as variable names
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-17 19:03:10 +11:00
Joakim Erdfelt f92394e748
Merge pull request #6053 from eclipse/jetty-9.4.x-client-hybrid-smaller
Issue #6052 - make ModuleLocation optional on Android
2021-03-15 11:58:51 -05:00
Joakim Erdfelt 9e29832a8a
Issue #6052 - Applying changes from review
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-15 09:22:04 -05:00
Joakim Erdfelt a3a1478c91
Issue #6052 - Removing MethodHandle from TypeUtil static initializer
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-15 09:05:25 -05:00
Lachlan Roberts 2f2b6ba8be Issue #6050 - add comment and change variable name to clarify
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-11 11:49:38 +11:00
Joakim Erdfelt d7982f869b
Issue #6052 - make ModuleLocation optional on Android
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-10 10:45:29 -06:00
Lachlan Roberts c8dd4cdaeb Issue #6050 - fix bug for permessage deflate buffer aggregation
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-10 21:30:43 +11:00
Olivier Lamy b899261497
fix some mod files: some url using http to https, use maven central if possible, upgrade log4j2 to 2.14.0 (#6048)
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-10 19:12:47 +10:00
Simone Bordet 132f4b9ab1 Fixes #6034 - SslContextFactory may select a wildcard certificate during SNI selection when a more specific SSL certificate is present.
Now matching certificates are sorted, non-wildcard first, so that a more specific alias is returned.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-09 09:55:44 +01:00
Joakim Erdfelt 367cd7b4c6
Adding CVE-2020-27223 reference to VERSION.txt
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-04 09:15:32 -06:00
Joakim Erdfelt 03f7a0cbc0
Merge remote-tracking branch 'origin/release-9.4.38' into jetty-9.4.x 2021-03-04 09:12:26 -06:00
Jan Bartel 01ee48cda3
Issue #6004 Add redirect for configure_9_3.dtd to XmlParserTest (#6015)
Signed-off-by: Jan Bartel <janb@webtide.com>
2021-02-27 14:37:36 +01:00
gregw 88a69b8f67 updated CVE
Signed-off-by: gregw <gregw@webtide.com>
2021-02-27 09:23:41 +01:00
Chris Walker 6e6574e92d Update Version.txt with CVEs (#6014)
Adds CVEs to Version.txt
2021-02-25 15:59:18 -06:00
Joakim Erdfelt 5fed958e08 Updating to version 9.4.39-SNAPSHOT 2021-02-24 14:52:43 -06:00
Joakim Erdfelt 288f3cc745 Updating to version 9.4.38.v20210224 2021-02-24 14:16:09 -06:00
Joakim Erdfelt 0603b1337b
Merge pull request #6005 from eclipse/jetty-9.4.x-6001-default-accept-ambiguous-uris
Fix #6001 separate compliance modes for ambiguous URI segments, params and separators
2021-02-24 14:12:05 -06:00
Joakim Erdfelt e68293ef4e
Addressing copy/paste mistakes
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-02-24 12:47:48 -06:00
gregw f9b5974ded Fix #4275 separate compliance modes for ambiguous URI segments and separators
default modes allows both ambiguous separators and segments, but still forbids ambiguous parameters
2021-02-24 19:17:49 +01:00
Greg Wilkins 49e73dfb75
Fix #4275 #6001 separate compliance modes for ambiguous URI segments and se… (#6003)
Fix #4275 separate compliance modes for ambiguous URI segments and separators
2021-02-24 10:05:05 +01:00
Simone Bordet c9cd1e4758
Merge pull request #5995 from eclipse/jetty-9.4.x-5994-qtp_free_threads
Fixes #5994 - QueuedThreadPool "free" threads
2021-02-24 09:31:03 +01:00
Greg Wilkins 8bd4a9fad8
Fix #5999 ArrayIndexOutOfBounds for unicode in HttpURI segment (#6000)
Fixed ArrayTrie to not throw if passed a unicode character.
2021-02-23 20:03:45 +01:00
Simone Bordet 530c14e7b3 Issue #5994 - QueuedThreadPool "free" threads
Updates after review.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-02-23 18:12:55 +01:00
gregw 16241d7fcb Efficiency improvements for #5977
Improve efficiency for non wrapped response for cache-contro
2021-02-23 13:09:02 +01:00
gregw fdb54fa2fb Efficiency improvements for #5977
Improve efficiency for non wrapped response for cache-contro
2021-02-23 13:06:50 +01:00
Greg Wilkins c0b0f80567
Efficiency improvements for #5977 (#5998)
Improve efficiency for non wrapped response for cache-contro
2021-02-23 12:56:22 +01:00
olivier lamy b836c2fda3 add test for fix containsHeader test when it is not instance of Response, Issue #5977 was partially fixed
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-23 10:32:00 +10:00
olivier lamy 38ef4009b9 fix containsHeader test when it is not instance of Response, Issue #5977 was partially fixed
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-23 10:01:53 +10:00
Simone Bordet 64e01beeeb Fixes #5994 - QueuedThreadPool "free" threads
Introduced to QueuedThreadPool:

* getMaxReservedThreads()
* getAvailableReservedThreads()
* getAvailableThreads()
* getReadyThreads()
* getLeasedThreads()

Also few small code cleanups.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-02-22 23:02:12 +01:00
Joakim Erdfelt ea2a76ed3b Updating to version 9.4.38-SNAPSHOT 2021-02-19 09:44:28 -06:00
Joakim Erdfelt 27afab2bd3 Updating to version 9.4.37.v20210219 2021-02-19 09:03:57 -06:00
olivier lamy 0423ad36c1 use jackson-databind 2.9.10.7
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-19 09:33:59 +10:00
Joakim Erdfelt bbcae23774
Merge pull request #5494 from eclipse/jetty-9.4.x-5492-java-features-start-properties
Issue #5492 - Adding java.features.* start properties
2021-02-18 16:04:39 -06:00
Joakim Erdfelt 7abd46032b
Merge pull request #5947 from eclipse/jetty-9.4.x-dependency-ant-in-antrun
Updating ant version in our maven plugin usages
2021-02-18 11:28:03 -06:00
Joakim Erdfelt f2bed1368b
Issue #5492 - changed from review
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-02-18 11:14:54 -06:00
Joakim Erdfelt 2aa1a68079
Merge remote-tracking branch 'origin/jetty-9.4.x' into jetty-9.4.x-5492-java-features-start-properties 2021-02-18 10:55:34 -06:00
Greg Wilkins 324ab668de
More optional etag gzip fixes for #5979 (#5986)
* More optional etag gzip fixes for #5979

IF no separator defined, do not add a suffix to an etag.
Some cleanup of the implementation.

* More optional etag gzip fixes for #5979

updates from review
2021-02-18 17:24:16 +01:00
Joakim Erdfelt a5c8fee872
Merge pull request #5976 from eclipse/jetty-9.4.x-new-header-rules
Adding requested Rewrite Rule to force request header values
2021-02-18 07:27:59 -06:00
Joakim Erdfelt 10e531756b
Merge pull request from GHSA-m394-8rww-3jr7
Use comparator based sort
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
Signed-off-by: gregw <gregw@webtide.com>

Co-authored-by: gregw <gregw@webtide.com>
2021-02-18 14:14:38 +01:00
Olivier Lamy addfbe81c1
Issue #5977 do not force Cache-Control header if already set (#5978)
* Issue #5977 do not force Cache-Control header if already set

Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-18 07:29:24 +10:00
Greg Wilkins a8b4927427
Fix #5979 by allowing a configurable etag separator. (#5980)
* Fix #5979 by allowing a configurable etag separator.

Fix #5979 by allowing a configurable etag separator

* updates from review

* Updates from review

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-02-17 22:19:23 +01:00
Simone Bordet 70d6724d93
Merge pull request #5974 from eclipse/jetty-9.4.x-5973-proxy_client_tls_auth_example
Fixes #5973 - Proxy client TLS authentication example.
2021-02-17 18:32:35 +01:00