spring-security

Commit Graph

Author	SHA1	Message	Date
Spring Buildmaster	afe5ec53d4	Release version 3.2.2.RELEASE	12 years ago
Rob Winch	7dbb8e777e	SEC-2500: Prevent anonymous bind for ActiveDirectoryLdapAuthenticator	12 years ago
Rob Winch	bb563967cc	SEC-2507: WebExpressionVoter.supports support subclasses of FilterInvocation	12 years ago
Rob Winch	974105ed19	SEC-2515: Detect object cycle for AuthenticationManager configuration	12 years ago
Rob Winch	2cad2f401b	SEC-2325: Polish CSRF Tag support - Rename csrfField to csrfInput - Make AbstractCsrfTag package scope - rename FormFieldTag to CsrfInputTag - rename MetaTagsTag to CsrfMetaTagsTag - removed whitespace from tag output so output is minimized & improving browser performance - Update @since - changed test names to be more meaningful	12 years ago
beamerblvd	3048e2c6e7	SEC-2325 Added JSP tags for CSRF meta tags and form fields	12 years ago
beamerblvd	561f284718	SEC-2335 Added ACL schema files for MySQL, SQL Server, Oracle	12 years ago
John Tims	afc6a6ee0d	SEC-2514: Fix typo in hellomvc.asc packags -> packages	12 years ago
John Tims	fa05e9c590	SEC-2513: Add link to SpringSource CLA form	12 years ago
Manimaran Selvan	818be86d46	SEC-2512: Fix typo in reference` udates -> updates	12 years ago
Rob Winch	60704eb50e	SEC-2511: Remove double ALLOW-FROM in X-Frame-Options header	12 years ago
getvictor	f02b77794f	SEC-2511: Remove double ALLOW-FROM from X-Frame-Options header. The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.	12 years ago
Rob Winch	1172d44397	SEC-2499: Allow MethodSecurityExpressionHandler in parent context Previously a NoSuchBeanDefintionException was thrown when the MethodSecurityExpressionHandler was defined in the parent context. This happened due to trying to work around ordering issues related to SEC-2136 This commit resolves this by not marking the MethodSecurityExpressionHandler bean as lazy unless it exists.	12 years ago
Rob Winch	49738e4588	SEC-2508: Passivity test for SEC-2357	12 years ago
Rob Winch	3b13c1fdf4	SEC-2495: CSRF disables logout on GET	12 years ago
Spring Buildmaster	8f6450ede1	Next development version	12 years ago
Rob Winch	f2cde4ffa3	SEC-2486: Update tests to Spring LDAP 2.0.1.RELEASE	12 years ago
Rob Winch	9810768186	SEC-2485: Update test to Spring 4.0.2.RELEASE	12 years ago
Rob Winch	7f99a2dfbb	SEC-2487: Update to Spring 3.2.8.RELEASE	12 years ago
Rob Winch	85305050c0	SEC-2455: Fix XML default login generation	12 years ago
Rob Winch	8a3a7961cb	SEC-2492: ExpressionUrlAuthorizationConfigurer private interceptUrl to void	12 years ago
Rob Winch	fc8e4868ce	SEC-2468: Fix tests	12 years ago
Rob Winch	65367e6547	SEC-2468: JdbcUserDetailsManager#createNewAuthentication uses null credentials	12 years ago
Rob Winch	bf2df220ca	SEC-2490: LdapAuthenticationProviderConfigurer allows custom LdapAuthoritiesPopulator	12 years ago
Rob Winch	152f41f61e	SEC-2392: KeyBasedPersistenceTokenService uses bytes instead of bits The method setPseudoRandomNumberBits actually sets the number of bytes. This commit deprecates setPseudoRandomNumberBits and adds setPseudoRandomNumberBytes. The default value is still 256 to remain passive but will be updated in 4.x.	12 years ago
Rob Winch	7a3da28987	SEC-2479: Search parent context for AuthenticationManager	12 years ago
Rob Winch	e17adad878	SEC-2469: Support Spring LDAP 2.0.1+	12 years ago
Luke Taylor	058b9debef	Minor slapd config changes	12 years ago
Rob Winch	6c35c33abe	SEC-2447: Fix AuthenticationManagerBuilder ordering issues	12 years ago
Rob Winch	c42e13c966	loginProcessing test	12 years ago
Rob Winch	6b42a2eae1	SEC-2461: Multi WebSecurityConfiguration does not create null springSecurityFilterChain	12 years ago
Rob Winch	ec8b48150d	SEC-2474: Update poms	12 years ago
Rob Winch	4eff50b48b	SEC-2474: Update tests against Spring 4.0.1	12 years ago
Rob Winch	087b56da96	SEC-2473: Update to Spring 3.2.7	12 years ago
Rob Winch	8d8475deb1	SEC-2455: form-login@login-processing-url & logout@logout-url use matchers Remove the deprecation warnings of using setFilterProcessingUrl by invoking the matcher methods instead.	12 years ago
Rob Winch	b5f5665ea6	SEC-2463: CSRF documentation includes EnableWebMvcSecurity	12 years ago
Rob Winch	3b05fd6fed	SEC-2466: Add link to MultipartFilter in CSRF multipart section	12 years ago
Rob Winch	4c84805ac9	SEC-2466: CSRF MutipartFilter doc now uses <url-pattern>	12 years ago
james	a99c6db327	SEC-2467: Fix Small errors in itest-web's jsps	12 years ago
Rob Winch	1f833b0d6b	Add ExpressionUrlAuthorizationCOnfigurer tests - Demo custom expression root - Demo @Bean in expression example	12 years ago
Spring Buildmaster	add3aae6ef	Next development version	12 years ago
Rob Winch	f09ce267b3	Polish MVC doc	12 years ago
Rob Winch	374aceed2b	Polish form.asc	12 years ago
Rob Winch	df703e0189	Polish hellomvc.asc	12 years ago
Rob Winch	8c580dc170	SEC-2444: Polish Thymeleaf for samples	12 years ago
Rob Winch	5205bf57c6	SEC-2453: Create 403 CSRF FAQ Entry	12 years ago
Rob Winch	994117ad75	SEC-2436: Fix CsrfConfigurerNoWebMvcTests	12 years ago
Rob Winch	b7041ed00e	SEC-2436: Add @EnableWebMvcSecurity	12 years ago
Rob Winch	053c890a69	SEC-2450: WebSecurityConfigurerAdapter have default Order of 100	12 years ago
Rob Winch	7838e3eeca	SEC-2447: JdbcMutableAclServiceTests should invoke aclCache.clearCache()	12 years ago

1 2 3 4 5 ...

5083 Commits (3.2.2.RELEASE) All Branches Search

5083 Commits (3.2.2.RELEASE)

All Branches