This is an automated email from the ASF dual-hosted git repository.
rmaucher pushed a change to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from 78036375a6 Tomcat 11 baseline is Java 17 not Java 21
new c013560d0d Ignore a null charset in the AddDefaultCharsetFilter
response wrapper rather than storing it and later appending a literal
charset=null parameter to the Content-Type header
new acaf036deb Make the content-type checks in the AddDefaultCharsetFilter
response wrapper case-insensitive as required by RFC 9110 for media types and
parameter names
new 44bd8a99e1 Use an instanceof check when instantiating the configured
randomClass in CsrfPreventionFilterBase.init() so a class that is not a Random
subclass produces the intended ServletException rather than a raw
ClassCastException
new 47c02352f8 Use an instanceof check when instantiating the configured
rateLimitClassName in RateLimitFilter.init() so a class that does not implement
RateLimiter produces the intended ServletException rather than a raw
ClassCastException
new 92515bac09 Synchronise the check for an existing nonce cache with its
creation in CsrfPreventionFilter to prevent concurrent requests on the same
session discarding a cache containing already-issued nonces, which could
trigger spurious rejections
new ad00e4274c Clamp the max-age value generated by the ExpiresFilter to a
minimum of zero to avoid emitting the invalid negative delta-seconds value when
the computed expiration time is already in the past
new 2cb4c097e1 Validate the port header value in RemoteIpFilter and
RemoteIpValve so that values outside the 1-65535 range fall back to the default
server port rather than being applied as an invalid port
new 677e69a178 Remove the placeholder from the http.403 message of the
filters package which was rendered literally in the non-HTTP deny response of
RequestFilter since no argument was ever provided
The 8 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../catalina/filters/AddDefaultCharsetFilter.java | 24 +++++---
.../catalina/filters/CsrfPreventionFilter.java | 7 ++-
.../catalina/filters/CsrfPreventionFilterBase.java | 7 ++-
.../org/apache/catalina/filters/ExpiresFilter.java | 7 ++-
.../catalina/filters/LocalStrings.properties | 2 +-
.../catalina/filters/LocalStrings_cs.properties | 2 +-
.../catalina/filters/LocalStrings_de.properties | 2 +-
.../catalina/filters/LocalStrings_es.properties | 2 +-
.../catalina/filters/LocalStrings_fr.properties | 2 +-
.../catalina/filters/LocalStrings_ja.properties | 2 +-
.../catalina/filters/LocalStrings_ko.properties | 2 +-
.../catalina/filters/LocalStrings_pt_BR.properties | 2 +-
.../catalina/filters/LocalStrings_ru.properties | 2 +-
.../catalina/filters/LocalStrings_zh_CN.properties | 2 +-
.../apache/catalina/filters/RateLimitFilter.java | 7 ++-
.../apache/catalina/filters/RemoteIpFilter.java | 4 ++
java/org/apache/catalina/valves/RemoteIpValve.java | 6 ++
.../catalina/filters/TestRemoteIpFilter.java | 54 ++++++++++++++++++
.../apache/catalina/valves/TestRemoteIpValve.java | 66 ++++++++++++++++++++++
19 files changed, 179 insertions(+), 23 deletions(-)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
