Arjen Poutsma
96f5314df6
Added XStream CatchAllConverter
...
Added XStream CatchAllConverter that supports all classes, but throws
exceptions for (un)marshalling.
Main purpose of this class is to register this converter as a catchall
last converter with a normal or higher priority in addition to
converters that explicitly support the domain classes that should be
supported. As a result, default XStream converters with lower
priorities and possible security vulnerabilities do not get invoked.
Issue: SPR-10821
13 years ago
Rossen Stoyanchev
2b628a1a0d
Fix bug that ignored custom json prefix
...
Issue: SPR-10817
13 years ago
Spring Buildmaster
349143864c
Increment version to 3.2.5.BUILD-SNAPSHOT
13 years ago
Spring Buildmaster
fc73f6bb2c
Release version 3.2.4.RELEASE
13 years ago
Phillip Webb
119364f326
Further 3.2.4 changelog entries
13 years ago
Arjen Poutsma
434735fbf6
Fix potential security risk when using Spring OXM
...
Disable by default external entity resolution when using Spring OXM
with jaxb. This prevents a XML entity from being able to resolve a
local file on the host system.
See:
https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing
Issue: SPR-10806
(cherry picked from commit 7576274 )
13 years ago
Grzegorz Rożniecki
8f4221deb3
Fix SimpleJdbcCall and SimpleJdbcInsert Javadoc
...
Change "fluid" interface to "fluent" and "string" to "chain", plus fix
few typos in Javadoc.
Issue: SPR-10792
(cherry picked from commit 2344412 )
13 years ago
Juergen Hoeller
2d646ca79e
Polishing
13 years ago
Juergen Hoeller
1245919331
Polishing
13 years ago
Juergen Hoeller
bcbd338fe2
Further 3.2.4 changelog entries
13 years ago
Juergen Hoeller
945463b826
Added javadoc note on the use of CachingConnectionFactory
...
Issue: SPR-10581
(cherry picked from commit 2626a35 )
13 years ago
Juergen Hoeller
3ba3dd61d1
Consistent use of varargs; deprecated setAnnotatedClass method
...
Issue: SPR-10421
13 years ago
Juergen Hoeller
cd523c7051
Restored overridable getXStream() method in Spring Framework 3.2.x
...
Also setting the bean class loader on the XStream instance itself now.
Issue: SPR-10421
13 years ago
Juergen Hoeller
20ddd3254b
DelegatingFilterProxy avoids synchronization for pre-resolved delegate
...
Issue: SPR-10413
(cherry picked from commit c26272c )
13 years ago
Juergen Hoeller
e30b842316
Fixed ClassFilterAwareUnionMethodMatcher equals implementation
...
Issue: SPR-10604
(cherry picked from commit f329140 )
13 years ago
Rossen Stoyanchev
b0675c031e
Make date methods in HttpHeaders public
...
Issue: SPR-10713
13 years ago
Rossen Stoyanchev
0f71da5be6
Return -1 after parse error for Expires header
...
Issue: SPR-10648
13 years ago
Juergen Hoeller
9035a97e18
Refined javadoc for WebLogic/WebSphere transaction setup
...
Issue: SPR-10777
13 years ago
Juergen Hoeller
d32a77a5f0
Optimized TomcatInstrumentableClassLoader implementation
...
Issue: SPR-10788
13 years ago
Juergen Hoeller
d8e3ef7640
Polishing
...
Issue: SPR-10752
Issue: SPR-10627
13 years ago
Juergen Hoeller
ccb02a2355
Updated changelog for 3.2.4
13 years ago
Juergen Hoeller
d0948f1f03
Fixed misunderstanding with respect to excludeUnlistedClasses default in JPA 2.0
...
Issue: SPR-10767
13 years ago
Juergen Hoeller
ae0f23e942
Polishing
...
Issue: SPR-10752
Issue: SPR-10627
13 years ago
Juergen Hoeller
b40263e06b
PropertySourcesPlaceholderConfigurer's "ignoreUnresolvablePlaceholders" setting reliably applies to nested placeholders as well
...
Issue: SPR-10549
(cherry picked from commit 127b91f )
13 years ago
Juergen Hoeller
2f8dfb3e52
Updated Quartz version range in javadoc
...
Issue: SPR-10775
13 years ago
Juergen Hoeller
d5c78c953d
Remove the JobDetail from the job data map after discovering it
...
Issue: SPR-10775
13 years ago
Juergen Hoeller
dfac1d0510
Added "requestsRecovery" bean property to JobDetailFactoryBean
...
Issue: SPR-10775
13 years ago
Juergen Hoeller
14b83c3fcc
Polishing
...
Issue: SPR-10609
13 years ago
Phillip Webb
ae6e84bc7d
Fix TestNG build settings
13 years ago
Phillip Webb
4213a31a7d
Fix failing test due to CUSTOM_COMPILATION Group
13 years ago
Phillip Webb
22454c8edf
Upgradle to gradle 1.6
13 years ago
Deline Neo
98da5a7b2b
Add attributeDoesNotExist ModelResultMatcher
...
Issue: SPR-10509
13 years ago
Phillip Webb
0a37552beb
Add CUSTOM_COMPILATION TestGroup
13 years ago
Phillip Webb
1b702fa6a2
Revert "Add test source dependency in attempt to fix CI"
...
This reverts commit a2e438b2be .
13 years ago
Phillip Webb
a2e438b2be
Add test source dependency in attempt to fix CI
13 years ago
Phillip Webb
9ff9d45283
Minor polish to gradle build
13 years ago
Phillip Webb
1fee4c0c0b
Upgradle to gradle 1.6
13 years ago
Rossen Stoyanchev
dc87a2211c
Make HTTP scheme parsing case-insensitive
...
Issue: SPR-10779
13 years ago
Phillip Webb
77b7344530
Upgradle to gradle 1.6
13 years ago
Phillip Webb
7cde4f1503
Update gradle plugin versions
13 years ago
Rossen Stoyanchev
6c11fd3b5e
Fix issue with parsing x-forwarded-host header
...
Issue: SPR-10701
13 years ago
Biju Kunjummen
eec4a37d1c
Fix Jaxb2TypeScanner to scan for @XmlRegistry
...
Update ClassPathJaxb2TypeScanner to scan for @XmlRegistry classes.
Prior to this commit explicitly configured @XmlRegistry annotated classes
were not registered with the JAXBContext when using the 'packagesToScan'
property of the Jaxb2Unmarshaller.
Issue: SPR-10714
(cherry picked from 4f871d4 )
13 years ago
Phillip Webb
1e3dc4aeae
Include argument types in MethodReference cache
...
Update the cached MethodExecutor in MethodReference to include the
method argument types. Prevents the incorrect use of the cache when the
SpEL expression refers to a class that has overloaded methods.
Issue: SPR-10657
(cherry picked from commit f9b12b8 )
13 years ago
Phillip Webb
d4b54d834e
Skip abstract beans in getBeansWithAnnotation()
...
Update BeanFactory.getBeansWithAnnotation() to skip any abstract
bean definitions.
Issue: SPR-10663
(cherry picked from commit 8ed8ee2 )
13 years ago
Juergen Hoeller
3562cd759b
Moved executor null check to AsyncExecutionInterceptor, allowing AbstractAsyncExecutionAspect to fall back to sync execution (as in 3.2.1)
...
Issue: SPR-10636
(cherry picked from commit b6c54c3 )
13 years ago
Juergen Hoeller
c1dc4e2c75
Resource-based PlatformTransactionManager implementations defensively catch Throwable in doBegin in order to reliably close resource in case of OutOfMemoryError
...
Issue: SPR-10755
(cherry picked from commit 2e4eb9f )
13 years ago
Phillip Webb
8feeec4a60
Fix ResourceHttpRequestHandler empty location log
...
Fix ResourceHttpRequestHandler to only log warning when locations
is empty.
Issue: SPR-10780
(cherry picked from bc52469 )
13 years ago
Phillip Webb
440a63a3d0
Make TypeDescriptor serializable
...
Issue: SPR-10631
(cherry picked from 9eb596a )
13 years ago
Phillip Webb
274ed1fe67
Remove unnecessary spring-instrument dependencies
...
Remove unnecessary spring-core dependency from spring-instrument.
Issue: SPR-10732
(cherry picked from 9939c48 )
13 years ago
Phillip Webb
1b47f6c0b0
Add Java 7 instrumentation manifest attributes
...
Update META-INF/MANIFEST.MF for spring-instrument to include
necessary attributes for running under Java 7:
Can-Redefine-Classes : true
Can-Retransform-Classes: true
Can-Set-Native-Method-Prefix : false
(see http://docs.oracle.com/javase/7/docs/api/java/lang/instrument/
package-summary.html)
Prior to this commit `InstrumentationSavingAgent.getInstrumentation().
addTransformer(t, true);` would fail under Java 7.
Issue: SPR-10731
(Cherry picked from 50333ca )
13 years ago