This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-codec.git
The following commit(s) were added to refs/heads/master by this push:
new 14ae67df Reject embedded question marks in RFC 1522 encoded content
14ae67df is described below
commit 14ae67df41a9bf2419da5454b94b57129d93d4b9
Author: Gary Gregory <[email protected]>
AuthorDate: Fri Sep 18 13:02:32 2026 -0700
Reject embedded question marks in RFC 1522 encoded content
Require the payload separator to be the final "?=" delimiter, preventing
BCodec and QCodec from silently discarding trailing content. Preserve
BCodec's lenient default decoding policy.
Add regression tests for malformed payloads under both BCodec policies
and for correctly encoded question marks.
---
src/changes/changes.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index f8775ae7..ef78a50f 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -61,6 +61,7 @@ The <action> type attribute can be add,update,fix,remove.
<action type="fix" dev="ggregory" due-to="Gary Gregory">Close the
underlying BaseNCodecOutputStream output even when final conversion or flushing
fails, preserving suppressed close exceptions.</action>
<action type="fix" dev="ggregory" due-to="Gary Gregory">Reject invalid
GitIdentifiers tree entry names and file/directory name conflicts to prevent
ambiguous tree serialization and colliding identifiers.</action>
<action type="fix" dev="ggregory" due-to="Gary Gregory">Hex decoding now
accepts only ASCII hexadecimal characters (0-9, A-F, a-f). Previously accepted
non-ASCII Unicode digits and fullwidth letters now cause DecoderException,
including when supplied as UTF-8 bytes or ByteBuffers.</action>
+ <action type="fix" dev="ggregory" due-to="Gary Gregory">Restrict Hex
decoding to ASCII hexadecimal characters.</action>
<!-- ADD -->
<action type="add" dev="ggregory" due-to="Gary Gregory">Add and use
PhoneticEngine.Builder and deprecate old constructors.</action>
<action type="add" dev="ggregory" due-to="Gary Gregory">Add
BeiderMorseEncoder.Builder and deprecate old constructor.</action>
