[
https://issues.apache.org/jira/browse/KNOX-3450?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18123256#comment-18123256
]
ASF subversion and git services commented on KNOX-3450:
-------------------------------------------------------
Commit d4b23f173cedfe444f8b1f58ae0dbbfa72cf0ec1 in knox's branch
refs/heads/v2.1.x from hanicz
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=d4b23f173 ]
Backporting improvements from 3.1.x (#1440)
* KNOX-3488: Harden original-url cookie validation (#1429)
* KNOX-3488: Harden original-url validation
* KNOX-3488: Harden redirect and logout jsp originalUrl as well
* KNOX-3488: WebSSOResourceTest for empty cookie, and valid originalUrl cookie
is removed
(cherry picked from commit 315ae7cff03182be4a5456b4d8fb50c947e4489d)
* KNOX-3447: Harden ServiceDefinitonUnmarshaller (#1387)
(cherry picked from commit b2d2843c602c5810fe2fa75542debe81a8c6a608)
* KNOX-3430: Deprecate AccessTokenFederationFilter, also added
UnsupportedOperatorException (#1370)
(cherry picked from commit 7d719ca06d1179c5ca2a22312623e91768c5b6f2)
* KNOX-3450: Add Transfer-Encoding to set of excluded headers in
PassAllHeadersDispatch (#1389)
PassAllHeadersDispatchTest.java Generated-by: Claude Code
(cherry picked from commit 0a3a7949b091dcdc3f609f1f95c1dd95d3f91b0c)
---------
Co-authored-by: Phil Zampino <[email protected]>
> Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch
> --------------------------------------------------------------------------
>
> Key: KNOX-3450
> URL: https://issues.apache.org/jira/browse/KNOX-3450
> Project: Apache Knox
> Issue Type: Improvement
> Components: Server
> Affects Versions: 3.0.0
> Reporter: Philip Zampino
> Assignee: Philip Zampino
> Priority: Major
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Exclude the Transfer-Encoding header from PassAllHeadersDispatch by default.
> Without this, it can be configured since this dispatch is a
> ConfigurableDispatch, but this makes it the default behavior.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
