This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-validator.git
The following commit(s) were added to refs/heads/master by this push:
new 2aa372f9 Prevent URL path traversal bypass via percent encoding in
UrlValidator
2aa372f9 is described below
commit 2aa372f93f8c136cddbf01f19affda6f5b6a1fa9
Author: Sebb <[email protected]>
AuthorDate: Fri Jun 19 12:56:37 2026 +0100
Prevent URL path traversal bypass via percent encoding in UrlValidator
Update changes.xml
---
src/changes/changes.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 032c1df0..6f056155 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -81,6 +81,7 @@ The <action> type attribute can be add,update,fix,remove.
<action type="fix" dev="ggregory" due-to="Mauricio Bento, Gary
Gregory">Add missing tests for ValidatorUtils.replace and
ValidatorUtils.copyMap (#396)..</action>
<action type="fix" dev="ggregory" due-to="sahvx655-wq, Gary Gregory">Fix
RegexValidator.validate() returning null for a valid match (#395).</action>
<action type="fix" dev="ggregory" due-to="sahvx655-wq, Gary
Gregory">Compare CAS and EC check digit against validated code, not raw input
(#398).</action>
+ <action type="fix" dev="ggregory" due-to="sahvx655-wq">Prevent URL path
traversal bypass via percent encoding in UrlValidator (#383).</action>
<!-- ADD -->
<action type="add" dev="ggregory" due-to="Gary Gregory">Add and use
CheckDigitException.CheckDigitException(String, Object...) (#389).</action>
<action type="add" dev="ggregory" due-to="Gary Gregory">Add and use
ValidatorException.ValidatorException(Throwable). Call sites that previously
called new ValidatorException(Throwable#getMessage()) now preserve that
exception (#390).</action>
