matrei commented on PR #16040: URL: https://github.com/apache/grails-core/pull/16040#issuecomment-5710460501
@jamesfredley I have merged `8.0.x` into the branch and resolved the overlap with #16149: - `ControllersAutoConfiguration.java` — kept the `Environment`-aware `dispatcherServlet` bean from #16149, dropped the Grails `MultipartConfigElement` bean as this PR intends. - `THREAT_MODEL.md` — kept the new P10 XXE row next to the reworded P9. - Upgrade guide §53.1 and its Undertow note now name `spring.servlet.multipart.*` and Boot's 1 MB / 10 MB defaults, and link to the new §4.2 migration section. - The oversized-upload specs #16149 added to the app1, app4, jetty and undertow example apps relied on the old 128000-byte default; with Boot's defaults a 200000-byte payload would no longer trip the limit. Those apps now configure `spring.servlet.multipart` limits and the spec labels say so. Verified locally: `:grails-controllers:test`, the four upload-limit integration specs on Tomcat, Jetty and Undertow (26 tests, all green), and `aggregateViolations` reports no Checkstyle, CodeNarc, PMD or SpotBugs issues. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
