Spring/spring-framework
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
26,865 Commits 18 Branches 0 Tags
0fef3802024d158e47ddc8db45d061a86e2f51ad
Commit Graph

1091 Commits

Author SHA1 Message Date
Sam Brannen
5bc80fc094 Disable SpEL selector support in WebSocket messaging by default 
This commit disables support for evaluating SpEL expressions from
untrusted sources by default. Specifically, this applies to the
SpEL-based 'selector' header support in WebSocket messaging, which
includes the DefaultSubscriptionRegistry and the classes used to
configure the 'selector' header name (SimpleBrokerMessageHandler and
SimpleBrokerRegistration).

The selector header support remains in place but will have to be
explicitly enabled beginning with Spring Framework 6.1.

For example, a custom implementation of WebSocketMessageBrokerConfigurer
can override the configureMessageBroker() method and configure the
selector header name as follows.

  registry.enableSimpleBroker().setSelectorHeaderName("selector");

Closes gh-30550
 2023-06-04 17:02:02 +02:00
Sam Brannen
bedf5f26fe Merge branch '6.0.x' 2023-06-04 16:27:23 +02:00
Sam Brannen
d08e4081c2 Polishing 2023-06-04 15:59:12 +02:00
Sam Brannen
ab253470f0 Update copyright headers 2023-05-23 15:12:32 +02:00
rstoyanchev
73d30dd875 Polishing contribution 
Closes gh-30403
 2023-05-05 20:53:52 +01:00
Olga MaciaszekSharma
033548a760 Remove default blockTimeout on interface clients 
See gh-30403
 2023-05-05 20:53:52 +01:00
Sam Brannen
d446de62a4 Update copyright headers 2023-04-19 15:55:11 +02:00
SW
59c65fa940 Replace Collections.unmodifiableList(new ArrayList(..)) with List.copyOf() (#30166) 2023-04-12 13:07:20 +02:00
divcon
33ef9107e0 Minor refactoring in PayloadMethodArgumentResolver 
Closes gh-30168
 2023-04-11 11:36:41 +01:00
Sam Brannen
a6338fcc43 Update copyright headers 2023-03-06 17:20:42 +01:00
Sam Brannen
004a144bdc Apply "instanceof pattern matching" in remainder of spring-messaging module 
See gh-30067
 2023-03-06 16:23:10 +01:00
Juergen Hoeller
a936a6a8ce Javadoc-only reference to SubscribeMapping from simp package (-> package dependency cycle) 
See gh-30002
 2023-03-02 13:57:17 +01:00
Sam Brannen
edb4a3467a Update copyright headers 2023-02-26 18:37:18 +01:00
Sam Brannen
9305a64a50 Polish contribution 
See gh-29994
 2023-02-26 18:30:14 +01:00
divcon
40672c3715 Apply "instance of patten matching" in context and messaging modules 
Closes gh-29994
 2023-02-26 18:30:14 +01:00
Sébastien Deleuze
626a7fc52a Add native support for @SubscribeMapping and @MessageExceptionHandler 
Closes gh-30002
 2023-02-21 18:47:30 +01:00
rstoyanchev
ccbb4bdd27 PayloadMethodArgumentResolver supports Optional 
Closes gh-28945
 2023-02-13 18:39:19 +00:00
Arjen Poutsma
3e2f58cdd2 Offer restricted access to DataBuffer's ByteBuffer 
This commit introduces DataBuffer::readableByteBuffers and
DataBuffer::writableByteBuffers, allowing restricted access to the
ByteBuffer used internally by DataBuffer implementations.

Closes gh-29943
 2023-02-13 15:28:29 +01:00
Sam Brannen
97e557c886 Update copyright headers 2023-02-07 16:37:18 +01:00
Sam Brannen
ac6385025b Polishing 2023-02-02 15:02:10 +01:00
Olga Maciaszek-Sharma
4beb05ddb3 Add native support for RSocketExchange. 
This commit introduces new AOT processors that look for
`@RSocketExchange` annotated methods on interfaces implemented by beans
and registers reachability metadata accordingly:

* JDK proxies for the beans themselves
* invocation reflection for annotated methods
* binding reflection for arguments and return types

This allows to compile such clients to Native Images.

Closes gh-29877
 2023-02-01 18:22:33 +01:00
Sam Brannen
a12c9a0430 Update copyright headers 2023-01-16 19:24:30 +01:00
Sam Brannen
8be542016b Apply "instanceof pattern matching" in spring-jms 2023-01-16 19:24:30 +01:00
Sam Brannen
a4956dfe26 Update copyright headers 2023-01-11 13:52:20 +01:00
Krzysztof Krason
afb8a0d1b1 Use new Java features (switch expressions, text blocks, new JDK methods) 
Closes gh-29747
 2023-01-11 13:51:28 +01:00
Sam Brannen
5c28b56823 Remove duplicated words in Javadoc 2022-12-18 12:05:18 +01:00
Sam Brannen
46fc28fd1a Clean up Javadoc and source code regarding " ." typos 2022-12-12 16:31:14 +01:00
Sam Brannen
ad60164911 Update copyright headers for source code changed since August 2022 
The changes in this commit were performed using the newly introduced
update_copyright_headers.sh script.
 2022-11-29 19:38:42 +01:00
Sam Brannen
a88dbbec98 Apply project formatting rules for ternary operator 
Discovered via RegEx: ^\s+\?
 2022-11-29 17:51:13 +01:00
rstoyanchev
a3c89092e1 Log connection info in StompBrokerRelayMessageHandler 
See gh-29287
 2022-11-23 13:58:37 +00:00
Sam Brannen
0c878d2d06 Apply additional 'instanceof pattern matching' in spring-web 
See gh-29530
 2022-11-21 15:57:53 +01:00
Arjen Poutsma
792371ac1f Generalize Jackson version numbers 
This commit removes specific version info from Jackson codecs and
converters, in favor of generic info or removing the version information
all together.

See gh-29508
 2022-11-17 16:56:38 +01:00
Sam Brannen
abf3400c07 Use Assert.state() where appropriate 2022-11-15 12:31:10 +01:00
Sam Brannen
eb91d21ada Polishing 2022-11-13 18:21:56 +01:00
Sam Brannen
a9a78686ed Merge branch '5.3.x' 
# Conflicts:
#	spring-messaging/src/main/java/org/springframework/messaging/simp/stomp/StompDecoder.java
 2022-11-08 18:13:26 +01:00
Christoph Dreis
55b258f2de Avoid unnecessary allocations in StompDecoder#unescape 
Closes gh-29443
 2022-11-08 18:10:54 +01:00
Sam Brannen
3438c47744 Polishing 2022-11-08 11:48:13 +01:00
rstoyanchev
aeb35663d4 Remove deprecated methods in HttpServiceProxyFactory 2022-11-07 16:57:17 +00:00
Sam Brannen
ac5eb9bfd3 Avoid String allocations with Assert.isTrue() 2022-11-05 14:51:36 +01:00
Sam Brannen
82823517fa Merge branch '5.3.x' 
# Conflicts:
#	build.gradle
#	spring-messaging/src/main/java/org/springframework/messaging/rsocket/DefaultRSocketRequesterBuilder.java
#	spring-messaging/src/main/java/org/springframework/messaging/rsocket/MetadataEncoder.java
#	spring-messaging/src/main/java/org/springframework/messaging/simp/broker/OrderedMessageChannelDecorator.java
#	spring-messaging/src/main/java/org/springframework/messaging/simp/user/DefaultUserDestinationResolver.java
#	spring-test/src/main/java/org/springframework/test/web/servlet/request/MockHttpServletRequestBuilder.java
#	spring-web/src/main/java/org/springframework/http/HttpRange.java
#	spring-webflux/src/main/java/org/springframework/web/reactive/result/view/RedirectView.java
#	spring-webflux/src/main/java/org/springframework/web/reactive/socket/CloseStatus.java
#	spring-webmvc/src/main/java/org/springframework/web/servlet/config/annotation/RedirectViewControllerRegistration.java
 2022-11-05 14:50:18 +01:00
Sam Brannen
5f02323b9c Avoid String allocations with Assert.isTrue() 2022-11-05 14:40:45 +01:00
Sam Brannen
2afcf60566 Avoid String allocations with Assert.state() 2022-11-04 16:44:59 +01:00
Sam Brannen
d849f9816a Merge branch '5.3.x' 
# Conflicts:
#	build.gradle
#	spring-webflux/src/test/java/org/springframework/web/reactive/result/view/script/ScriptTemplateViewTests.java
#	spring-webmvc/src/main/java/org/springframework/web/servlet/view/script/ScriptTemplateView.java
#	spring-webmvc/src/test/java/org/springframework/web/servlet/view/script/ScriptTemplateViewTests.java
 2022-11-04 16:29:54 +01:00
Sam Brannen
a281d8c3fd Polishing 2022-11-04 16:24:59 +01:00
rstoyanchev
5aeafc0761 Fix ISE in [Http|RSocket]ServiceProxyFactory 
Closes gh-29376
 2022-10-25 12:27:53 +01:00
rstoyanchev
d4f7484252 Add Builder to RSocketServiceProxyFactory 
RSocketServiceProxyFactory now support programmatic initialization
through a builder, while bean-style initialization is deprecated.

Closes gh-29296
 2022-10-19 14:36:45 +01:00
Sébastien Deleuze
aa776e40f9 Ensure classpath checks can be evaluated at build-time 
Closes gh-29352
 2022-10-19 10:49:11 +02:00
Violeta Georgieva
b5adae2086 Switch to Reactor Netty 2 snapshots 
Update to Reactor BOM 2022.0.0-SNAPSHOT.
Process package changes.
Adapt to new `HttpHeaders` API.
Adapt to new cookies API.

See gh-29247
 2022-10-03 18:20:52 +01:00
Sam Brannen
321092ce6f Consistent use of @Deprecated(since = "6.0") 2022-09-20 14:34:24 +02:00
Sam Brannen
b87d48b99b Merge branch '5.3.x' 2022-09-14 17:18:00 +02:00