• last updated a few seconds ago
Constraints: committers
Constraints: files
Constraints: dates
BZ1548975: Port Tomcat patch for CVE-2018-1304.
BZ1520539: Log all multi value headers. Submitted by Petr Jurak.
Web 7.5.27.
BZ1513302: Set DESx as MEDIUM. Patch submitted by Michal Babacek.
BZ1498331: Followup, some specific code for trailing / handling needed to be added.
Web 7.5.26.
BZ1498331: Port over new checks for CVE-2017-12615 and followups.
Web 7.5.25.
BZ1492870: Endpoint close has to be taken out of the sync to avoid a deadlock.
BZ1491857: Switch the default to the HTTP spec.
BZ1489846: Part 2: remove char restrictions.
BZ1489846: Port Coty's patch to allow again {|} chars in the URL. For compatibility, this is enabled by default (set the system property to empty to disable it).
Web 7.5.24.
BZ1433123: Avoid calling prepareRequest if an error occurred earlier.
BZ1460573: Handle error processing as a GET, fix for CVE-2017-5664.
Web 7.5.23
BZ1393221: Port Tomcat fix for CVE-2016-6796.
BZ1393226: Patch CVE-2016-5018, just in case.
BZ1419145: Hack to force restore of the content type header even when there's no body. Submitted by Aaron Ogburn.
BZ1439225: set encoding for multipart/form-data. Submitted by Aaron Ogburn.
Web 7.5.22.
BZ1426471: Remove possible deadlock situation. The non blocking code is only really used by websockets, which has write syncs already, so it is possible to remove it.
BZ1426264: Fix weird error handling in blockingWrite, also remove the immediate close for other errors, and always return a negative value.
BZ1423453: Port code cleanup from Tomcat.
BZ1410869: Fix sync of AysncContext.complete, and change all syncs from the processor object to the request object (since it is available everywhere).
Web 7.5.21.
BZ1410869: Make the async context a separate object from the request, so that it can be recycled to avoid bad side effects.
    • -0
    • +253
BZ1399005: Add debug to max swallow input.
Web 7.5.20.
BZ1399014: Fix CVE-2016-6816 request smuggling
  1. ./src/main/java/org/apache/tomcat/util/http/parser
    • -0
    • +551
    • -0
    • +125