Spring/spring-framework
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
7,059 Commits 18 Branches 0 Tags
379d2e6da0cf4e1d8009111920b7df8e40496e1f
Commit Graph

7059 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Brian Clozel
379d2e6da0 Fix location checks for servlet 3 resources 
SPR-12354 applied new checks to make sure that served static resources
are under authorized locations.

Prior to this change, serving static resources from Servlet 3 locations
such as "/webjars/" would not work since those locations can be within
one of the JARs on path. In that case, the checkLocation method would
return false and disallow serving that static resource.

This change fixes this issue by making sure to call the
`ServletContextResource.getPath()` method for servlet context resources.

Note that there's a known workaround for this issue, which is using a
classpath scheme as location, such as:
"classpath:/META-INF/resources/webjars/" instead of "/webjars".

Issue: SPR-12432
(cherry picked from commit 1214624)
 2014-11-24 19:11:15 +01:00
Brian Clozel
c75e370eaf Use https for maven repositories 
(cherry picked from commit 493e846)
 2014-11-24 19:07:57 +01:00
Juergen Hoeller
4b4bc2dae0 Revised fix for SPR-12334, now finding duplicates at the collectImports level 
Issue: SPR-12442
 2014-11-22 23:59:12 +01:00
Juergen Hoeller
feb6552d2c Avoid early initialization of Derby driver (for "derby.stream.error.method" system property) 
Issue: SPR-12437
 2014-11-22 23:21:31 +01:00
Juergen Hoeller
7f1e5a49a4 Polishing 
(cherry picked from commit 2675ce7)
 2014-11-22 23:19:48 +01:00
Juergen Hoeller
f6e1856276 Rearranged WebAsyncTask constructor interdependencies and assertions 
Issue: SPR-12457
(cherry picked from commit aadb93f)
 2014-11-22 23:19:41 +01:00
Juergen Hoeller
d02d9cea4e MethodParameter generally uses volatile variables where applicable now (as well as a local copy of the parameterNameDiscoverer field) 
Issue: SPR-12453
(cherry picked from commit 7fcadaa)
 2014-11-22 23:19:35 +01:00
Spring Buildmaster
cf5077861a Next Development Version 2014-11-11 02:26:26 -08:00
Stephane Nicoll
e2b42614c4 Update changelog 2014-11-11 10:37:24 +01:00
Rossen Stoyanchev
3f68cd633f Apply extra checks to static resource handling 
- remove leading '/' and control chars
- improve url and relative path checks
- account for URL encoding
- add isResourceUnderLocation final verification

Issue: SPR-12354
 2014-11-11 06:49:42 +01:00
Juergen Hoeller
e1d6826fcd Polishing 2014-11-11 03:26:40 +01:00
Rossen Stoyanchev
6b353e889a Improve exception message 
Issue: SPR-12230
(cherry picked from commit 2d0a677)
 2014-11-06 16:34:37 +01:00
Juergen Hoeller
983ebaf658 Log context cache statistics in the TCF 
Prior to this commit, finding out how many application contexts had
been loaded within a test suite required the use of reflection and a
bit of hacking.

This commit addresses this issue by logging ContextCache statistics
whenever an application context is loaded by the Spring TestContext
Framework (TCF).

The log output can be enabled by setting the
"org.springframework.test.context.cache" logging category to DEBUG.

Issue: SPR-12409
(cherry picked from commit a09bc9b)
 2014-11-06 16:34:29 +01:00
Juergen Hoeller
d5e4592728 Polishing 2014-11-02 11:19:54 +01:00
Juergen Hoeller
233393e3d5 Test for <util:map> with LinkedCaseInsensitiveMap and specified key/value types, with corresponding 3.2.x fix 
Issue: SPR-10994
(cherry picked from commit de8645b)
 2014-11-02 11:08:46 +01:00
Juergen Hoeller
bb6349f8cc SimpleMetadataReaderFactory is capable of resolving inner class names with dot syntax now (analogous to ClassUtils.forName) 
Issue: SPR-12390
(cherry picked from commit 2d874d7)
 2014-11-02 00:22:08 +01:00
Juergen Hoeller
d53b67f5cb TilesConfigurer defensively expects null from getResources in case of no resources found 
Also includes order preservation for resource results with Tiles 2 as well as retrieval failure logging with Tiles 3.

Issue: SPR-12362
(cherry picked from commit c8b8dc5)
 2014-11-02 00:21:19 +01:00
Juergen Hoeller
f812998826 Set ResponseStatusExceptionResolver.messageSource in the MVC Java config 
Issue: SPR-12380
(cherry picked from commit aa82da8)
 2014-11-02 00:21:02 +01:00
Juergen Hoeller
7d44c7cb51 QualifierAnnotationAutowireCandidateResolver calls BeanFactory.getType defensively 
Issue: SPR-12191
(cherry picked from commit 73ce3b5)
 2014-10-22 17:23:41 +02:00
Juergen Hoeller
be89612ec0 ConfigurationClassParser avoids ImportBeanDefinitionRegistrar double scan 
Issue: SPR-12334
 2014-10-22 01:58:57 +02:00
Juergen Hoeller
4ab27d83a1 Consistently accept empty Content-Type header and empty character encoding 
Issue: SPR-12173
(cherry picked from commit a1c0905)
 2014-10-22 01:58:22 +02:00
Juergen Hoeller
de3ea5dad6 Deprecated BeanDefinitionDocumentReader's setEnvironment method in favor of access via XmlReaderContext 
Issue: SPR-12248
 2014-10-07 18:00:21 +02:00
Juergen Hoeller
1341fd4e73 Consistent use of LinkedHashSet for interfaces (since interface order may matter in subtle cases) 
(cherry picked from commit 6f9d7da)
 2014-10-07 17:50:20 +02:00
Juergen Hoeller
473d97350e Explicitly detect (and log) private @Scheduled methods on CGLIB proxies 
Issue: SPR-12308
(cherry picked from commit 47ed4d6)
 2014-10-07 17:38:37 +02:00
Juergen Hoeller
76ab5b9de2 Consistent reset of resource holders on doBegin failure 
Issue: SPR-12280
(cherry picked from commit 9758bc7)
 2014-10-07 00:39:45 +02:00
Juergen Hoeller
6183e83b6a Provider declaration for @Value method argument works again 
Issue: SPR-12297
(cherry picked from commit c672678)
 2014-10-07 00:23:24 +02:00
Juergen Hoeller
a1538a451a Further locking optimizations for the retrieval of non-singleton beans 
Issue: SPR-12250
(cherry picked from commit ac4103d)
 2014-10-07 00:12:12 +02:00
Juergen Hoeller
b45d08f192 Remove outdated references to ContextLoaderServlet 
Issue: SPR-7725
 2014-09-30 20:56:57 +02:00
Juergen Hoeller
65d47afc11 WebAsyncManager avoids concurrentResult.toString() and builds correct DeferredResultProcessingInterceptor keys 
Issue: SPR-12253
(cherry picked from commit 901346e)
 2014-09-30 20:51:45 +02:00
Juergen Hoeller
2c921681fe LiveBeansView escapes double quotes in resource descriptions 
Issue: SPR-12252
(cherry picked from commit 1ffefcb)
 2014-09-30 20:49:04 +02:00
Juergen Hoeller
834ddad616 Polishing 
(cherry picked from commit 50e50d0)
 2014-09-20 01:01:30 +02:00
Juergen Hoeller
37da70629f ScheduledAnnotationBeanPostProcessor avoids needless re-scanning of non-annotated classes 
Issue: SPR-12189
(cherry picked from commit 58b22ce)
 2014-09-17 22:50:05 +02:00
Juergen Hoeller
5cf452463e Log warning for single optional constructor when no default constructor to fall back to 
Issue: SPR-12161
(cherry picked from commit 80cec01)
 2014-09-17 22:39:13 +02:00
Juergen Hoeller
e819999c08 Polishing 2014-09-17 19:10:33 +02:00
Juergen Hoeller
3a1f7b6d14 Client request implementations enforce RFC 6265 (cookies in a single header) 
Issue: SPR-12196
(cherry picked from commit 26a93b6)
 2014-09-17 18:43:04 +02:00
Juergen Hoeller
44c52a9096 Accept empty Content-Type header 
Issue: SPR-12173
(cherry picked from commit 70412a9)
 2014-09-17 18:17:09 +02:00
Spring Buildmaster
f2675f7571 Next Development Version 2014-09-04 06:29:53 -07:00
Brian Clozel
0262d33f11 Polish 2014-09-04 11:27:55 +02:00
Brian Clozel
ab8c3c785f Update changelog for 3.2.11 version 2014-09-04 11:13:32 +02:00
Juergen Hoeller
3264437cec Polishing 2014-09-04 02:42:34 +02:00
Juergen Hoeller
3d4e73b10c Polishing 2014-09-04 01:47:00 +02:00
Juergen Hoeller
42557743e8 CachingConnectionFactory proceeds to physicalClose in case of logicalClose exceptions 
Issue: SPR-12148
(cherry picked from commit 82f8b43)
 2014-09-04 01:45:47 +02:00
Juergen Hoeller
d18bdf6448 Polishing 
(cherry picked from commit d2ef6dc)
 2014-09-03 14:25:16 +02:00
Juergen Hoeller
5da8a16284 AbstractAutowireCapableBeanFactory avoids early FactoryBean instantiation on currently created configuration bean 
Issue: SPR-12141
(cherry picked from commit 4432c41)
 2014-09-03 14:23:56 +02:00
Sam Brannen
3b64db18f7 Include ALL source artifacts in published sources jars 
This commit updates the Gradle build to ensure that *all* source
artifacts are including in published 'sources' jars.

To achieve this, we are now assembling 'sources' jars from
'sourceSets.main.allSource' and not explicitly including or excluding
anything by default.

Issue: SPR-12085
(cherry picked from commit 07629a3c7c)
 2014-08-26 17:06:42 +02:00
Juergen Hoeller
21f0057990 Polishing 2014-08-23 00:11:19 +02:00
Juergen Hoeller
3e17331fd9 PropertySource implementations perform conversion to String arrays via StringUtils (getting rid of EMPTY_NAMES_ARRAY) 
(cherry picked from commit b73c531)
 2014-08-22 23:51:39 +02:00
Juergen Hoeller
a4c8e6176c Consistent attribute documentation/formatting in spring-context and spring-mvc schemas 
(cherry picked from commit b5763fe)
 2014-08-22 23:50:34 +02:00
Juergen Hoeller
7cf4a4ed2d DispatcherServlet's checkMultipart detects wrapped MultipartRequest as well 
Issue: SPR-12114
(cherry picked from commit 786fd92)
 2014-08-22 23:49:16 +02:00
Juergen Hoeller
388561df61 PersistenceAnnotationBeanPostProcessor defensively handles BeanDefinition access for extended EntityManagers 
Issue: SPR-8834
(cherry picked from commit 592e344)
 2014-08-22 23:47:26 +02:00