This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 113d3317be6 Put a configurable limit on deeply parenthesized
sub-expressions in the FiqlParser (#3442)
new 57879b1d1ee Put a max length on the Fiql search term and fix
performance parsing issue (#3443)
new aafd486d295 Harden Content-Disposition filename parsing against ReDoS
(#3448)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../apache/cxf/attachment/ContentDisposition.java | 3 +-
.../cxf/attachment/ContentDispositionTest.java | 37 ++++----
.../cxf/jaxrs/ext/search/SearchContextImpl.java | 4 +-
.../cxf/jaxrs/ext/search/fiql/FiqlParser.java | 31 +++++++
.../jaxrs/ext/search/SearchContextImplTest.java | 8 ++
.../jaxrs/ext/search/fiql/FiqlParserReDoSTest.java | 102 +++++++++++++++++++++
6 files changed, 165 insertions(+), 20 deletions(-)
copy
rt/bindings/corba/src/test/java/org/apache/cxf/binding/corba/runtime/CorbaStreamWriterTest.java
=> core/src/test/java/org/apache/cxf/attachment/ContentDispositionTest.java
(56%)
create mode 100644
rt/rs/extensions/search/src/test/java/org/apache/cxf/jaxrs/ext/search/fiql/FiqlParserReDoSTest.java
