This is an automated email from the ASF dual-hosted git repository.
sergehuber pushed a change to branch drop-public-cors-credentials
in repository https://gitbox.apache.org/repos/asf/unomi.git
from c0497920f Drop credentialed CORS on the public tracker endpoints.
add 5b9d24d24 Validate eventcollector query session ids and honor client
IPs only from configured proxies (#880)
No new revisions were added by this update.
Summary of changes:
.../org/apache/unomi/itests/InputValidationIT.java | 28 ++++++
..._valid.json => eventcollector_noSessionId.json} | 3 +-
manual/src/main/asciidoc/configuration.adoc | 4 +
.../main/resources/etc/custom.system.properties | 1 +
.../request/actions/SetRemoteHostInfoAction.java | 110 +++++++++++++++++++--
.../resources/OSGI-INF/blueprint/blueprint.xml | 3 +
.../resources/org.apache.unomi.plugins.request.cfg | 5 +
.../actions/SetRemoteHostInfoActionTest.java | 86 ++++++++++++++++
.../rest/endpoints/EventsCollectorEndpoint.java | 6 ++
.../rest/service/RequestIdentifierValidator.java | 50 ++++++++++
.../service/RequestIdentifierValidatorTest.java | 57 +++++++++++
11 files changed, 341 insertions(+), 12 deletions(-)
copy itests/src/test/resources/validation/{eventcollector_valid.json =>
eventcollector_noSessionId.json} (83%)
create mode 100644
plugins/request/src/test/java/org/apache/unomi/plugins/request/actions/SetRemoteHostInfoActionTest.java
create mode 100644
rest/src/main/java/org/apache/unomi/rest/service/RequestIdentifierValidator.java
create mode 100644
rest/src/test/java/org/apache/unomi/rest/service/RequestIdentifierValidatorTest.java
