spring-boot

Spring Boot

Branch: 3.3.x

Andy Wilkinson d9e4b66eee Add properties for new max part count and max part header size To address CVE-2025-48976 and CVE-2025-48988, Tomcat 10.1.42 has introduced two new configuration settings – maxPartCount and maxPartHeaderSize. The default values for these configuration settings have proven hard to get right and some applications have had to increase the default limits. To ease their configuration in Spring Boot, this commit introduces configuration properties for the new settings: - server.tomcat.max-part-count (maxPartCount) - server.tomcat.max-part-header-size (maxPartHeaderSize) The defaults are aligned with those of Tomcat 10.1.42 (10 and 512 bytes respectively). Closes gh-45869	6 months ago
..
src	Add properties for new max part count and max part header size	6 months ago
build.gradle	Order dependencies	9 months ago

Andy Wilkinson d9e4b66eee Add properties for new max part count and max part header size

To address CVE-2025-48976 and CVE-2025-48988, Tomcat 10.1.42 has
introduced two new configuration settings – maxPartCount and
maxPartHeaderSize. The default values for these configuration
settings have proven hard to get right and some applications have
had to increase the default limits. To ease their configuration in
Spring Boot, this commit introduces configuration properties for
the new settings:

-  server.tomcat.max-part-count (maxPartCount)
-  server.tomcat.max-part-header-size (maxPartHeaderSize)

The defaults are aligned with those of Tomcat 10.1.42
(10 and 512 bytes respectively).

Closes gh-45869

6 months ago

src

Add properties for new max part count and max part header size

6 months ago

build.gradle

Order dependencies

9 months ago