Phillip Webb 0d80f46cef Remove node and recursive limits for YAML ...

Update `OriginTrackedYamlLoader` to remove node limits and recursive
parsing restrictions. SnakeYAML 1.26 introduced these options in order
to protect against the "billion laugh attacks" but since we consider
`application.yml` files to be trusted, we don't need these restrictions.

Fixes gh-23096

2020-08-31 15:27:37 -07:00

..

spring-boot

Remove node and recursive limits for YAML

2020-08-31 15:27:37 -07:00

spring-boot-actuator

Merge branch '2.2.x' into 2.3.x

2020-08-26 14:49:12 +01:00

spring-boot-actuator-autoconfigure

Remove duplicate jackson-datatype-jsr310 dependency

2020-08-28 12:38:42 +01:00

spring-boot-autoconfigure

Upgrade to Testcontainers 1.14.3

2020-08-28 11:57:32 +01:00

spring-boot-cli

Merge branch '2.1.x' into 2.2.x

2020-07-23 11:01:05 +02:00

spring-boot-dependencies

Align managed version of Nimbus JOSE JWT with Spring Security

2020-08-25 09:53:50 +01:00

spring-boot-devtools

Increase wait times in DevToolsIntegrationTests

2020-08-25 16:50:56 +01:00

spring-boot-docs

Document how to perform tasks after application startup

2020-08-31 11:33:27 +02:00

spring-boot-parent

Upgrade to Testcontainers 1.14.3

2020-08-28 11:57:32 +01:00

spring-boot-properties-migrator

Require dependency on s-b-dependencies to use its constraints

2020-06-16 08:50:21 +01:00

spring-boot-starters

Simplify build.gradle for spring-boot-starter-data-solr

2020-08-12 11:40:21 +01:00

spring-boot-test

Merge branch '2.2.x' into 2.3.x

2020-08-06 10:15:22 -07:00

spring-boot-test-autoconfigure

Use DynamicPropertySource in MongoDB tests

2020-08-28 14:32:01 +01:00

spring-boot-tools

Document buildpacks are configured with target Java version

2020-08-31 16:15:30 +02:00