This is an automated email from the ASF dual-hosted git repository.
robertlazarski pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-core.git
from c06f6ef551 Keep generated output inside the output directory
new 8be5bb5723 Filter the service listing in the model, not only in the
view
new 84811c7c87 Say what context deserialization actually enforces, and
enforce that
new 583e78e683 Bound multiref resolution against cycles and expansion
new 94c935d140 Bound the MTOM, SwA and SOAP bodies too
new 25db09b07b update same dep on httpcomponents
new 6bdd6a07ea Screen every WSDL-loading path, not just the client-side one
new 00274eedfa Pin the Swagger UI scripts, and stop naming exception
classes in faults
new 3ff914a614 Make two threat-model claims true, and scope what they do
not cover
new 3cc039d012 Confine packaged-metadata lookup and fix a fail-open schema
guard
new 0795c50df1 Stop a remote server retargeting WSDL2Java's own WSDL fetch
new b5a2474b8c Deprecate the mail transport for removal in 2.1.0
new 5e93c08cf1 Drop the unused testkit dependency from transport-h2
new e170a13bde Stop bundling the JMS transport in axis2.war
The 13 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
SECURITY.md | 181 ++++++++++++---
.../axis2/databinding/utils/MultirefHelper.java | 200 ++++++++++++++++-
.../axis2/databinding/utils/MultirefCycleTest.java | 155 +++++++++++++
.../axis2/wsdl/codegen/CodeGenConfiguration.java | 107 ++++++++-
.../axis2/wsdl/codegen/WsdlRedirectTest.java | 120 ++++++++++
.../axis2/jaxws/handler/LogicalMessageImpl.java | 7 +-
.../src/org/apache/axis2/builder/MIMEBuilder.java | 12 +-
.../apache/axis2/builder/RequestSizeLimits.java | 20 ++
.../src/org/apache/axis2/builder/SOAPBuilder.java | 10 +-
.../externalize/ContextDeserializationFilter.java | 153 +++++++++++++
.../context/externalize/SafeObjectInputStream.java | 8 +-
.../deployment/resolver/AARBasedWSDLLocator.java | 9 +-
.../resolver/AARFileBasedURIResolver.java | 9 +-
.../deployment/resolver/WarBasedWSDLLocator.java | 9 +-
.../resolver/WarFileBasedURIResolver.java | 9 +-
.../org/apache/axis2/description/AxisService.java | 20 +-
.../description/WSDL11ToAxisServiceBuilder.java | 14 +-
.../description/WSDLToAxisServiceBuilder.java | 64 ++++--
.../org/apache/axis2/util/HardenedWSDLLocator.java | 245 +++++++++++++++++++++
.../org/apache/axis2/util/MetaInfResources.java | 106 +++++++++
.../kernel/src/org/apache/axis2/util/XMLUtils.java | 5 +-
.../axis2/wsdl/util/WSDLWrapperReloadImpl.java | 9 +-
.../axis2/builder/RequestSizeLimitsTest.java | 32 +++
.../ContextDeserializationFilterTest.java | 178 +++++++++++++++
.../apache/axis2/deployment/URIResolverTest.java | 36 +++
.../description/AbsoluteSchemaLocationTest.java | 110 +++++++++
.../apache/axis2/util/HardenedWSDLLocatorTest.java | 171 ++++++++++++++
.../apache/axis2/util/MetaInfResourcesTest.java | 166 ++++++++++++++
.../description/builder/JAXWSRIWSDLGenerator.java | 4 +-
.../org/apache/axis2/jaxws/util/WSDL4JWrapper.java | 14 +-
.../apache/axis2/openapi/OpenApiConfiguration.java | 24 ++
.../org/apache/axis2/openapi/SwaggerUIHandler.java | 70 +++++-
.../axis2/openapi/SwaggerUIIntegrityTest.java | 106 +++++++++
.../src/org/apache/axis2/saaj/SOAPBodyImpl.java | 6 +-
.../src/org/apache/axis2/saaj/util/SAAJUtil.java | 6 +-
.../src/userguide/springbootdemo-wildfly/pom.xml | 2 +-
modules/transport-h2/pom.xml | 6 -
.../apache/axis2/transport/http/AxisServlet.java | 28 ++-
.../axis2/transport/http/HTTPTransportUtils.java | 54 +----
.../apache/axis2/transport/http/ListingAgent.java | 13 +-
.../transport/http/ServiceListingFilterTest.java | 111 ++++++++++
modules/webapp/pom.xml | 5 -
modules/webapp/scripts/build.xml | 6 +
src/site/markdown/release-notes/2.0.2.md | 137 +++++++++++-
44 files changed, 2605 insertions(+), 152 deletions(-)
create mode 100644
modules/adb/test/org/apache/axis2/databinding/utils/MultirefCycleTest.java
create mode 100644
modules/codegen/test/org/apache/axis2/wsdl/codegen/WsdlRedirectTest.java
create mode 100644
modules/kernel/src/org/apache/axis2/context/externalize/ContextDeserializationFilter.java
create mode 100644
modules/kernel/src/org/apache/axis2/util/HardenedWSDLLocator.java
create mode 100644
modules/kernel/src/org/apache/axis2/util/MetaInfResources.java
create mode 100644
modules/kernel/test/org/apache/axis2/context/externalize/ContextDeserializationFilterTest.java
create mode 100644
modules/kernel/test/org/apache/axis2/description/AbsoluteSchemaLocationTest.java
create mode 100644
modules/kernel/test/org/apache/axis2/util/HardenedWSDLLocatorTest.java
create mode 100644
modules/kernel/test/org/apache/axis2/util/MetaInfResourcesTest.java
create mode 100644
modules/openapi/src/test/java/org/apache/axis2/openapi/SwaggerUIIntegrityTest.java
create mode 100644
modules/transport/http/src/test/java/org/apache/axis2/transport/http/ServiceListingFilterTest.java
