18791 Commits

Author SHA1 Message Date
Jesse McConnell
d23925809d
Updating to version 9.4.40-SNAPSHOT 2021-03-25 10:06:56 -05:00
Jesse McConnell
9fc7ca5a92
update VERSION.txt jetty-9.4.39.v20210325 2021-03-25 09:36:22 -05:00
Jesse McConnell
ee95f92d70
Updating to version 9.4.39.v20210325 2021-03-25 09:33:14 -05:00
Jesse McConnell
0992dbd35f
reset Version.txt 2021-03-25 09:20:02 -05:00
Jesse McConnell
65c2da3de3
reset build-resources version 2021-03-25 09:14:45 -05:00
Jesse McConnell
7dacf1503f
reset release to 9.4.39-SNAPSHOT 2021-03-25 09:03:35 -05:00
Jesse McConnell
be786489a8
reset release to 9.4.39-SNAPSHOT 2021-03-25 08:52:25 -05:00
Simone Bordet
f6afdc5b01 Issue #6085 Fix duplicate valid session cookies to pick first valid.
Fixed typo and stopping server & client in testMulitpleIdenticalSessionCookies().

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-25 13:09:32 +01:00
Simone Bordet
64006c61c6 Issue #6085 Fix duplicate valid session cookies to pick first valid.
Cosmetic changes.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-25 13:09:32 +01:00
Jan Bartel
af042ba297 Issue #6085 Fix duplicate valid session cookies to pick first valid.
Signed-off-by: Jan Bartel <janb@webtide.com>
2021-03-25 13:09:32 +01:00
Olivier Lamy
e0111e581a Updating to version 9.4.40-SNAPSHOT 2021-03-25 03:39:19 +00:00
Olivier Lamy
e56edccd03 Updating to version 9.4.39.v20210325 2021-03-25 03:20:25 +00:00
Joakim Erdfelt
1154f2ee4f
Issue #6063 - expose hazelcast.version (#6064)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-25 09:23:50 +10:00
Greg Wilkins
cb4b4d853d disable test on windows
Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-03-25 09:37:23 +11:00
Greg Wilkins
ebe8311333
Use Files.isSameFile to check Resource equality (#6093)
Use Files.isSameFile to check Resource equality
Avoid using canonical and instead use Files.isSameFile

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 12:54:21 +01:00
olivier lamy
63810134c7 do not use hardcoded port
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-24 16:33:04 +10:00
olivier lamy
d295aa6d63 run this test using testcontainers only if docker is available
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-24 16:33:04 +10:00
Jan Bartel
6d8ae9cafe
Issue #6085 Fix reference counts for multiple valid cookies for sessions (#6088)
* Issue #6085 Fix reference counts for multiple valid cookies for sesssions

Signed-off-by: Jan Bartel <janb@webtide.com>
2021-03-24 13:31:36 +11:00
Joakim Erdfelt
37fffb1722
Merge pull request from GHSA-j6qj-j888-vvgq
Ensure that WebAppProvider Filter always canonicalises the file passed in from the Scanner. Thus, both the monitored directory is canonical as well as the file it is being compared against.

Signed-off-by: Greg Wilkins <gregw@webtide.com>

Co-authored-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 01:18:40 +01:00
Greg Wilkins
e412c8a15b
Merge pull request from GHSA-v7ff-8wcx-gmc5
Always normalize ambiguous URIs

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-03-24 01:10:28 +01:00
Simone Bordet
294b2ba02b Fixes #6072 - jetty server high CPU when client send data length > 17408.
Updates after review.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-22 23:24:37 +01:00
Joakim Erdfelt
00d379c94b Fixes #6072 - jetty server high CPU when client send data length > 17408.
Avoid spinning if the input buffer is full.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
Co-authored-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-22 23:24:37 +01:00
Lachlan
6b341908cc
Merge pull request #6056 from eclipse/jetty-9.4.x-6050-WebSocket-NotUft8Exception
Issue #6050 - fix bug for permessage deflate buffer aggregation
2021-03-17 21:36:02 +11:00
Lachlan Roberts
2c5ab59c9d Issue #6050 - use compressed and decompressed as variable names
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-17 19:03:10 +11:00
Joakim Erdfelt
f92394e748
Merge pull request #6053 from eclipse/jetty-9.4.x-client-hybrid-smaller
Issue #6052 - make ModuleLocation optional on Android
2021-03-15 11:58:51 -05:00
Joakim Erdfelt
9e29832a8a
Issue #6052 - Applying changes from review
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-15 09:22:04 -05:00
Joakim Erdfelt
a3a1478c91
Issue #6052 - Removing MethodHandle from TypeUtil static initializer
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-15 09:05:25 -05:00
Lachlan Roberts
2f2b6ba8be Issue #6050 - add comment and change variable name to clarify
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-11 11:49:38 +11:00
Joakim Erdfelt
d7982f869b
Issue #6052 - make ModuleLocation optional on Android
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-10 10:45:29 -06:00
Lachlan Roberts
c8dd4cdaeb Issue #6050 - fix bug for permessage deflate buffer aggregation
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2021-03-10 21:30:43 +11:00
Olivier Lamy
b899261497
fix some mod files: some url using http to https, use maven central if possible, upgrade log4j2 to 2.14.0 (#6048)
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-03-10 19:12:47 +10:00
Simone Bordet
132f4b9ab1 Fixes #6034 - SslContextFactory may select a wildcard certificate during SNI selection when a more specific SSL certificate is present.
Now matching certificates are sorted, non-wildcard first, so that a more specific alias is returned.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-03-09 09:55:44 +01:00
Joakim Erdfelt
367cd7b4c6
Adding CVE-2020-27223 reference to VERSION.txt
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-03-04 09:15:32 -06:00
Joakim Erdfelt
03f7a0cbc0
Merge remote-tracking branch 'origin/release-9.4.38' into jetty-9.4.x 2021-03-04 09:12:26 -06:00
Jan Bartel
01ee48cda3
Issue #6004 Add redirect for configure_9_3.dtd to XmlParserTest (#6015)
Signed-off-by: Jan Bartel <janb@webtide.com>
2021-02-27 14:37:36 +01:00
gregw
88a69b8f67 updated CVE
Signed-off-by: gregw <gregw@webtide.com>
2021-02-27 09:23:41 +01:00
Chris Walker
6e6574e92d Update Version.txt with CVEs (#6014)
Adds CVEs to Version.txt
2021-02-25 15:59:18 -06:00
Joakim Erdfelt
5fed958e08 Updating to version 9.4.39-SNAPSHOT 2021-02-24 14:52:43 -06:00
Joakim Erdfelt
288f3cc745 Updating to version 9.4.38.v20210224 jetty-9.4.38.v20210224 2021-02-24 14:16:09 -06:00
Joakim Erdfelt
0603b1337b
Merge pull request #6005 from eclipse/jetty-9.4.x-6001-default-accept-ambiguous-uris
Fix #6001 separate compliance modes for ambiguous URI segments, params and separators
2021-02-24 14:12:05 -06:00
Joakim Erdfelt
e68293ef4e
Addressing copy/paste mistakes
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-02-24 12:47:48 -06:00
gregw
f9b5974ded Fix #4275 separate compliance modes for ambiguous URI segments and separators
default modes allows both ambiguous separators and segments, but still forbids ambiguous parameters
2021-02-24 19:17:49 +01:00
Greg Wilkins
49e73dfb75
Fix #4275 #6001 separate compliance modes for ambiguous URI segments and se… (#6003)
Fix #4275 separate compliance modes for ambiguous URI segments and separators
2021-02-24 10:05:05 +01:00
Simone Bordet
c9cd1e4758
Merge pull request #5995 from eclipse/jetty-9.4.x-5994-qtp_free_threads
Fixes #5994 - QueuedThreadPool "free" threads
2021-02-24 09:31:03 +01:00
Greg Wilkins
8bd4a9fad8
Fix #5999 ArrayIndexOutOfBounds for unicode in HttpURI segment (#6000)
Fixed ArrayTrie to not throw if passed a unicode character.
2021-02-23 20:03:45 +01:00
Simone Bordet
530c14e7b3 Issue #5994 - QueuedThreadPool "free" threads
Updates after review.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-02-23 18:12:55 +01:00
gregw
16241d7fcb Efficiency improvements for #5977
Improve efficiency for non wrapped response for cache-contro
2021-02-23 13:09:02 +01:00
gregw
fdb54fa2fb Efficiency improvements for #5977
Improve efficiency for non wrapped response for cache-contro
2021-02-23 13:06:50 +01:00
Greg Wilkins
c0b0f80567
Efficiency improvements for #5977 (#5998)
Improve efficiency for non wrapped response for cache-contro
2021-02-23 12:56:22 +01:00
olivier lamy
b836c2fda3 add test for fix containsHeader test when it is not instance of Response, Issue #5977 was partially fixed
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-02-23 10:32:00 +10:00