This is an automated email from the ASF dual-hosted git repository.
rmaucher pushed a change to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from 5301caf434 Update to Bouncy Castle 1.86
new a37a2b73d3 Ignore a null charset in the AddDefaultCharsetFilter
response wrapper rather than storing it and later appending a literal
charset=null parameter to the Content-Type header
new 680811294c Make the content-type checks in the AddDefaultCharsetFilter
response wrapper case-insensitive as required by RFC 9110 for media types and
parameter names
new db6fe77aeb Use an instanceof check when instantiating the configured
randomClass in CsrfPreventionFilterBase.init() so a class that is not a Random
subclass produces the intended ServletException rather than a raw
ClassCastException
new 7bbfecb929 Use an instanceof check when instantiating the configured
rateLimitClassName in RateLimitFilter.init() so a class that does not implement
RateLimiter produces the intended ServletException rather than a raw
ClassCastException
new cb9c6ecc04 Synchronise the check for an existing nonce cache with its
creation in CsrfPreventionFilter to prevent concurrent requests on the same
session discarding a cache containing already-issued nonces, which could
trigger spurious rejections
new f5d13393ec Clamp the max-age value generated by the ExpiresFilter to a
minimum of zero to avoid emitting the invalid negative delta-seconds value when
the computed expiration time is already in the past
new 9a461eeadd Validate the port header value in RemoteIpFilter and
RemoteIpValve so that values outside the 1-65535 range fall back to the default
server port rather than being applied as an invalid port
new 9a69c3308c Remove the placeholder from the http.403 message of the
filters package which was rendered literally in the non-HTTP deny response of
RequestFilter since no argument was ever provided
new 1765a0eb20 Fix compilation errors
The 9 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../catalina/filters/AddDefaultCharsetFilter.java | 24 +++++---
.../catalina/filters/CsrfPreventionFilter.java | 7 ++-
.../catalina/filters/CsrfPreventionFilterBase.java | 7 ++-
.../org/apache/catalina/filters/ExpiresFilter.java | 7 ++-
.../catalina/filters/LocalStrings.properties | 2 +-
.../catalina/filters/LocalStrings_cs.properties | 2 +-
.../catalina/filters/LocalStrings_de.properties | 2 +-
.../catalina/filters/LocalStrings_es.properties | 2 +-
.../catalina/filters/LocalStrings_fr.properties | 2 +-
.../catalina/filters/LocalStrings_ja.properties | 2 +-
.../catalina/filters/LocalStrings_ko.properties | 2 +-
.../catalina/filters/LocalStrings_pt_BR.properties | 2 +-
.../catalina/filters/LocalStrings_ru.properties | 2 +-
.../catalina/filters/LocalStrings_zh_CN.properties | 2 +-
.../apache/catalina/filters/RateLimitFilter.java | 7 ++-
.../apache/catalina/filters/RemoteIpFilter.java | 4 ++
java/org/apache/catalina/valves/RemoteIpValve.java | 6 ++
.../catalina/filters/TestRemoteIpFilter.java | 54 +++++++++++++++++
.../apache/catalina/valves/TestRemoteIpValve.java | 68 ++++++++++++++++++++++
19 files changed, 181 insertions(+), 23 deletions(-)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
