5bc80fc094
Disable SpEL selector support in WebSocket messaging by default
...
This commit disables support for evaluating SpEL expressions from
untrusted sources by default. Specifically, this applies to the
SpEL-based 'selector' header support in WebSocket messaging, which
includes the DefaultSubscriptionRegistry and the classes used to
configure the 'selector' header name (SimpleBrokerMessageHandler and
SimpleBrokerRegistration).
The selector header support remains in place but will have to be
explicitly enabled beginning with Spring Framework 6.1.
For example, a custom implementation of WebSocketMessageBrokerConfigurer
can override the configureMessageBroker() method and configure the
selector header name as follows.
registry.enableSimpleBroker().setSelectorHeaderName("selector");
Closes gh-30550
3 years ago
d08e4081c2
Polishing
3 years ago
ab253470f0
Update copyright headers
3 years ago
73d30dd875
Polishing contribution
...
Closes gh-30403
3 years ago
033548a760
Remove default blockTimeout on interface clients
...
See gh-30403
3 years ago
d446de62a4
Update copyright headers
3 years ago
59c65fa940
Replace `Collections.unmodifiableList(new ArrayList(..))` with `List.copyOf()` ( #30166 )
3 years ago
33ef9107e0
Minor refactoring in PayloadMethodArgumentResolver
...
Closes gh-30168
3 years ago
a6338fcc43
Update copyright headers
3 years ago
004a144bdc
Apply "instanceof pattern matching" in remainder of spring-messaging module
...
See gh-30067
3 years ago
a936a6a8ce
Javadoc-only reference to SubscribeMapping from simp package (-> package dependency cycle)
...
See gh-30002
3 years ago
edb4a3467a
Update copyright headers
3 years ago
9305a64a50
Polish contribution
...
See gh-29994
3 years ago
40672c3715
Apply "instance of patten matching" in context and messaging modules
...
Closes gh-29994
3 years ago
626a7fc52a
Add native support for @SubscribeMapping and @MessageExceptionHandler
...
Closes gh-30002
3 years ago
ccbb4bdd27
PayloadMethodArgumentResolver supports Optional
...
Closes gh-28945
3 years ago
3e2f58cdd2
Offer restricted access to DataBuffer's ByteBuffer
...
This commit introduces DataBuffer::readableByteBuffers and
DataBuffer::writableByteBuffers, allowing restricted access to the
ByteBuffer used internally by DataBuffer implementations.
Closes gh-29943
3 years ago
97e557c886
Update copyright headers
3 years ago
ac6385025b
Polishing
3 years ago
4beb05ddb3
Add native support for RSocketExchange.
...
This commit introduces new AOT processors that look for
`@RSocketExchange` annotated methods on interfaces implemented by beans
and registers reachability metadata accordingly:
* JDK proxies for the beans themselves
* invocation reflection for annotated methods
* binding reflection for arguments and return types
This allows to compile such clients to Native Images.
Closes gh-29877
3 years ago
a12c9a0430
Update copyright headers
3 years ago
8be542016b
Apply "instanceof pattern matching" in spring-jms
3 years ago
a4956dfe26
Update copyright headers
3 years ago
afb8a0d1b1
Use new Java features (switch expressions, text blocks, new JDK methods)
...
Closes gh-29747
3 years ago
5c28b56823
Remove duplicated words in Javadoc
3 years ago
46fc28fd1a
Clean up Javadoc and source code regarding " ." typos
3 years ago
ad60164911
Update copyright headers for source code changed since August 2022
...
The changes in this commit were performed using the newly introduced
update_copyright_headers.sh script.
3 years ago
a88dbbec98
Apply project formatting rules for ternary operator
...
Discovered via RegEx: ^\s+\?
3 years ago
a3c89092e1
Log connection info in StompBrokerRelayMessageHandler
...
See gh-29287
3 years ago
0c878d2d06
Apply additional 'instanceof pattern matching' in spring-web
...
See gh-29530
3 years ago
792371ac1f
Generalize Jackson version numbers
...
This commit removes specific version info from Jackson codecs and
converters, in favor of generic info or removing the version information
all together.
See gh-29508
3 years ago
abf3400c07
Use Assert.state() where appropriate
3 years ago
eb91d21ada
Polishing
3 years ago
55b258f2de
Avoid unnecessary allocations in StompDecoder#unescape
...
Closes gh-29443
3 years ago
3438c47744
Polishing
3 years ago
aeb35663d4
Remove deprecated methods in HttpServiceProxyFactory
3 years ago
ac5eb9bfd3
Avoid String allocations with Assert.isTrue()
3 years ago
5f02323b9c
Avoid String allocations with Assert.isTrue()
3 years ago
2afcf60566
Avoid String allocations with Assert.state()
3 years ago
a281d8c3fd
Polishing
3 years ago
5aeafc0761
Fix ISE in [Http|RSocket]ServiceProxyFactory
...
Closes gh-29376
3 years ago
d4f7484252
Add Builder to RSocketServiceProxyFactory
...
RSocketServiceProxyFactory now support programmatic initialization
through a builder, while bean-style initialization is deprecated.
Closes gh-29296
3 years ago
aa776e40f9
Ensure classpath checks can be evaluated at build-time
...
Closes gh-29352
3 years ago
b5adae2086
Switch to Reactor Netty 2 snapshots
...
Update to Reactor BOM 2022.0.0-SNAPSHOT.
Process package changes.
Adapt to new `HttpHeaders` API.
Adapt to new cookies API.
See gh-29247
4 years ago
321092ce6f
Consistent use of @Deprecated(since = "6.0")
4 years ago
ce49068ff9
Fix links in Javadoc and reference docs
...
- Fix broken links (by using a new URL, an alternative URL, or a
Wayback Machine link)
- Use HTTPS where possible
- Remove https://issuetracker.springsource.com/browse/EBR-349 : this
link is dead and is also mentioned in
https://jira.spring.io/browse/SPR-8093
- Clean up nohttp allowlist.lines
Closes gh-28876
4 years ago
92a231cf91
Fix typos in Javadoc, reference docs, and code
...
Closes gh-28822
4 years ago
bbe5e91ebc
Minor change in ReactorNetty2TcpClient
...
A follow-up on recent addition of ReactorNetty2TcpClient and switch to
Netty 5 Buffer.
4 years ago
4e97776969
Polishing contribution
...
Closes gh-28715
4 years ago
d42f950a36
Pass headers to STOMP receipt callbacks
...
See gh-28715
4 years ago
Sam Brannen
rstoyanchev
Olga MaciaszekSharma
SW
divcon
Juergen Hoeller
Sébastien Deleuze
Arjen Poutsma
Krzysztof Krason
Sam Brannen
Christoph Dreis
Violeta Georgieva
Marc Wrobel
Napster