Commit Graph

9838 Commits

Author SHA1 Message Date
Jesse McConnell 71e0f4d8ce [maven-release-plugin] prepare release jetty-9.2.11.v20150529 2015-05-29 09:06:36 -05:00
Jesse McConnell f42ea615b6 set for release 2015-05-29 08:38:59 -05:00
Greg Wilkins 4472b614b9 468747 - XSS vulnerability in HttpSpiContextHandler 2015-05-29 20:12:57 +10:00
Greg Wilkins 0db541889b 468714 SelectorManager updateKey race without submit 2015-05-29 12:27:12 +10:00
Jesse McConnell 57d0594e73 set for development 2015-05-28 10:56:18 -05:00
Jesse McConnell a7087cbfbf [maven-release-plugin] prepare for next development iteration 2015-05-28 10:06:51 -05:00
Jesse McConnell 913c63e597 [maven-release-plugin] prepare release jetty-9.2.11.v20150528 2015-05-28 10:03:44 -05:00
Jesse McConnell cfbb26beda set for release 2015-05-28 09:09:07 -05:00
Simone Bordet 0ad471449b 468421 - HttpClient#send fails with IllegalArgumentException on non-lowercase schemes.
RFC 7230 specifies that both scheme and host must be case insensitive.
2015-05-28 15:38:28 +02:00
Greg Wilkins c9be4d10fc 468008 Scanner ignores directory length 2015-05-23 08:41:56 +10:00
Simone Bordet 43780f6c78 Updated ALPN API to 1.1.2.v20150522. 2015-05-22 10:24:32 +02:00
Jan Bartel d7819913a6 Updated osgi alpn bundle to alpn api 1.1.1 2015-05-22 15:21:56 +10:00
Greg Wilkins ac7b515915 465053 Prevent gzip buffer overflow on complete 2015-05-22 10:46:40 +10:00
Greg Wilkins 8aeec6803c 465053 Prevent gzip buffer overflow on complete 2015-05-22 10:36:46 +10:00
Greg Wilkins 5bde7f34ea 467936 -w Check HttpOutput aggregateSize is < bufferSize 2015-05-22 09:56:51 +10:00
Simone Bordet c7cff6ec7e 467603 - Response 401 from server hangs client. 2015-05-19 19:05:06 +02:00
Greg Wilkins e5fac304b4 467276 NPE protection in SslContextFactory
Also-by: P.Ottlinger<phil@edojo.org>
2015-05-14 08:32:12 +10:00
Jan Bartel 1b2ee5e576 Comment changes to MongoSessionManager 2015-05-13 08:52:55 +10:00
Simone Bordet f580cf72ac Updated ALPN API to 1.1.1.v20150508. 2015-05-08 10:52:54 +02:00
Greg Wilkins f4d6f49d2f 466329 Fixed local only TestFilter 2015-05-06 14:32:06 +10:00
Simone Bordet 4573e20033 464292 - Implement stream-based transformer for AsyncMiddleManServlet.
Added boolean return value from transform(Source, Sink) so that the
implementation can optimize source-to-sink write in case of no
transformations.
2015-05-05 15:54:02 +02:00
Greg Wilkins b5818034eb 465734 DosFilter whitelist bit pattern fix
removed conflicting setter
2015-04-30 13:51:27 +10:00
Jan Bartel 25474ff7ab 465700 NullPointerException in ResourceHandler with welcome files 2015-04-30 09:06:01 +10:00
Jan Bartel d7de34af76 465202 Forked Mojo does not extract war overlays/dependencies 2015-04-29 18:01:41 +10:00
Greg Wilkins 2c65b66f9c 465734 DosFilter whitelist bit pattern fix 2015-04-29 15:18:48 +10:00
Greg Wilkins d5c95a1302 465747 - Jetty is failing to process all HTTP OPTIONS requests.
The Server handleOptions method was handling all OPTIONS * requests with a blank 200 response.
This has been fixed so that this method only checks that * URI is only applied to OPTIONS method.
2015-04-29 14:01:20 +10:00
Jan Bartel 6ebfd88323 465360 URLResource.addPath should use _useCaches setting to create new Resource 2015-04-24 14:51:29 +10:00
Jan Bartel ff8eeae982 465359 Resource.newResource(String res, boolean useCache) does not use useCache argument 2015-04-24 14:29:56 +10:00
Simone Bordet 1270d291cc 465181 - HttpParser parse full end chunk.
Continue parsing until the buffer is empty, or the parser returns
true to indicate that content is being handled asynchronously.
2015-04-23 08:58:54 +02:00
Greg Wilkins f061ae79f4 465181 HttpParser delay messageComplete until after chunk trailer 2015-04-22 20:56:09 +10:00
Jan Bartel a7bd9d1dd9 464989 AbstractSessionManager.removeEventListener() should remove HttpSessionIdListener 2015-04-22 15:39:35 +10:00
Greg Wilkins e97c726ccf 464740 DosFilter whiteList check improvement 2015-04-22 13:19:00 +10:00
Simone Bordet f73f2c22e3 Moved TransparentDelegate to AbstractProxyServlet.
Added AsyncMiddleManServlet.Transparent.
2015-04-21 12:16:10 +02:00
Greg Wilkins aa3c881eec 464869 PathResource.addPath allows absolute resolution.
Added test harness to demonstrate
Applied suggested fix - which fixes the test.

Need to analyse why this every worked, why it was not detected and what are the ramifications in 9.2.x and 9.3.x releases
2015-04-20 11:34:36 +10:00
Simone Bordet 6fa863d6be Updated ALPN and NPN versions for JDK 7u79, 7u80 and 8u45. 2015-04-15 19:09:46 +02:00
Jan Bartel 92a3f17532 464438 ClassFileTransformer support in org.eclipse.jetty.webapp.WebAppClassLoader broken 2015-04-13 14:51:22 +10:00
Simone Bordet 4fbdafb9e9 464292 - Implement stream-based transformer for AsyncMiddleManServlet.
Introduced AfterContentTransformer with a transform(Source, Sink)
method that offers an InputStream to read the original content from,
and an OutputStream to write transformed content to.
2015-04-09 15:15:27 +02:00
Simone Bordet 990a045588 Deprecated filterResponseHeader() in favour of filterServerResponseHeader(). 2015-04-08 18:11:24 +02:00
Simone Bordet 509d13531c 463579 - Add support for 308 status code. 2015-03-31 13:57:12 +02:00
Joakim Erdfelt f06e846812 Adding some websocket client upgrade logging 2015-03-27 15:32:50 -07:00
Simone Bordet 07d29fb1b3 461499 - ConnectionPool may leak connections.
Avoid that the complete event is notified before or concurrently with
the response success event.
2015-03-26 11:33:17 +01:00
Jesse McConnell 7bc2d50bf7 set for dev 2015-03-25 09:54:16 -05:00
Jesse McConnell da4f95f3d3 [maven-release-plugin] prepare for next development iteration 2015-03-25 09:08:27 -05:00
Jesse McConnell e92fd438fd [maven-release-plugin] prepare release jetty-9.2.11.M0 2015-03-25 09:08:21 -05:00
Jesse McConnell cf544ef708 update for milestone release 2015-03-25 08:13:39 -05:00
Simone Bordet aa096d56c1 Fixed Javadocs. 2015-03-25 11:11:12 +01:00
Greg Wilkins 8c652fd5bd 462546 - ShutdownMonitor should bind to jetty.host
Added STOP.HOST system property.  jetty.host is specific to a connector and a server may listen to many hosts
2015-03-25 13:58:19 +11:00
Simone Bordet 1dc66b72dd 461499 - ConnectionPool may leak connections.
Made associate(), disassociate() and abort() atomic operations using
the HttpExchange state to coordinate atomicity.
In this way, it's not possible to associate a HttpChannel and a
HttpExchange if the latter has been aborted.
2015-03-24 16:19:45 +01:00
Simone Bordet 3b31d6aa12 Added ALPN files for JDK 8u40. 2015-03-24 12:52:16 +01:00
Simone Bordet 517b575c7f Fixed logging statement. 2015-03-23 22:27:00 +01:00