This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a change to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 43831e7b7ce Put a configurable limit on deeply parenthesized
sub-expressions in the FiqlParser (#3442)
new c4cdb60d24f Put a max length on the Fiql search term and fix
performance parsing issue (#3443)
new 386ef39d991 Harden Content-Disposition filename parsing against ReDoS
(#3448)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../apache/cxf/attachment/ContentDisposition.java | 3 +-
.../cxf/attachment/ContentDispositionTest.java | 37 ++++----
.../cxf/jaxrs/ext/search/SearchContextImpl.java | 4 +-
.../cxf/jaxrs/ext/search/fiql/FiqlParser.java | 31 +++++++
.../jaxrs/ext/search/SearchContextImplTest.java | 8 ++
.../jaxrs/ext/search/fiql/FiqlParserReDoSTest.java | 102 +++++++++++++++++++++
6 files changed, 165 insertions(+), 20 deletions(-)
copy
rt/bindings/corba/src/test/java/org/apache/cxf/binding/corba/runtime/CorbaStreamWriterTest.java
=> core/src/test/java/org/apache/cxf/attachment/ContentDispositionTest.java
(56%)
create mode 100644
rt/rs/extensions/search/src/test/java/org/apache/cxf/jaxrs/ext/search/fiql/FiqlParserReDoSTest.java
