spring-security

Commit Graph

Author	SHA1	Message	Date
Spring Buildmaster	afcad4f0d4	Release version 3.2.3.RELEASE	12 years ago
Rob Winch	32c767a30d	SEC-2533: Global AuthenticationManagerBuilder disables clearing child credentials	12 years ago
Rob Winch	a11746a8d1	SEC-2498: RequestCache allows POST when CSRF is disabled	12 years ago
Rob Winch	a18265a163	SEC-2531: AuthenticationConfiguration#lazyBean should use BeanClassLoader	12 years ago
Rob Winch	d7a2c0a98c	SEC-2177: Polish	12 years ago
Maciej Zasada	9057fbe0ed	SEC-2177: Striping off all leading schemes Striping off all leading schemes in the DefaultRedirectStrategy, so it will be less vulnerable to open redirect phishing attacks. More info can be found at SEC-2177 JIRA issue.	12 years ago
Julien Dubois	537d8f974f	SEC-2519: RememberMeAuthenticationException supports root cause Added a constructor which keeps the root cause of the exception, and added some documentation	12 years ago
Alexander Kjäll	783af4012b	SEC-2518: UserDetailsService javadoc repeats "insensitive" Typo in javadoc, "case insensitive" was repeated twice.	12 years ago
Spring Buildmaster	5f5b8052d8	Next development version	12 years ago
Rob Winch	7dbb8e777e	SEC-2500: Prevent anonymous bind for ActiveDirectoryLdapAuthenticator	12 years ago
Rob Winch	bb563967cc	SEC-2507: WebExpressionVoter.supports support subclasses of FilterInvocation	12 years ago
Rob Winch	974105ed19	SEC-2515: Detect object cycle for AuthenticationManager configuration	12 years ago
Rob Winch	2cad2f401b	SEC-2325: Polish CSRF Tag support - Rename csrfField to csrfInput - Make AbstractCsrfTag package scope - rename FormFieldTag to CsrfInputTag - rename MetaTagsTag to CsrfMetaTagsTag - removed whitespace from tag output so output is minimized & improving browser performance - Update @since - changed test names to be more meaningful	12 years ago
beamerblvd	3048e2c6e7	SEC-2325 Added JSP tags for CSRF meta tags and form fields	12 years ago
beamerblvd	561f284718	SEC-2335 Added ACL schema files for MySQL, SQL Server, Oracle	12 years ago
John Tims	afc6a6ee0d	SEC-2514: Fix typo in hellomvc.asc packags -> packages	12 years ago
John Tims	fa05e9c590	SEC-2513: Add link to SpringSource CLA form	12 years ago
Manimaran Selvan	818be86d46	SEC-2512: Fix typo in reference` udates -> updates	12 years ago
Rob Winch	60704eb50e	SEC-2511: Remove double ALLOW-FROM in X-Frame-Options header	12 years ago
getvictor	f02b77794f	SEC-2511: Remove double ALLOW-FROM from X-Frame-Options header. The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.	12 years ago
Rob Winch	1172d44397	SEC-2499: Allow MethodSecurityExpressionHandler in parent context Previously a NoSuchBeanDefintionException was thrown when the MethodSecurityExpressionHandler was defined in the parent context. This happened due to trying to work around ordering issues related to SEC-2136 This commit resolves this by not marking the MethodSecurityExpressionHandler bean as lazy unless it exists.	12 years ago
Rob Winch	49738e4588	SEC-2508: Passivity test for SEC-2357	12 years ago
Rob Winch	3b13c1fdf4	SEC-2495: CSRF disables logout on GET	12 years ago
Spring Buildmaster	8f6450ede1	Next development version	12 years ago
Rob Winch	f2cde4ffa3	SEC-2486: Update tests to Spring LDAP 2.0.1.RELEASE	12 years ago
Rob Winch	9810768186	SEC-2485: Update test to Spring 4.0.2.RELEASE	12 years ago
Rob Winch	7f99a2dfbb	SEC-2487: Update to Spring 3.2.8.RELEASE	12 years ago
Rob Winch	85305050c0	SEC-2455: Fix XML default login generation	12 years ago
Rob Winch	8a3a7961cb	SEC-2492: ExpressionUrlAuthorizationConfigurer private interceptUrl to void	12 years ago
Rob Winch	fc8e4868ce	SEC-2468: Fix tests	12 years ago
Rob Winch	65367e6547	SEC-2468: JdbcUserDetailsManager#createNewAuthentication uses null credentials	12 years ago
Rob Winch	bf2df220ca	SEC-2490: LdapAuthenticationProviderConfigurer allows custom LdapAuthoritiesPopulator	12 years ago
Rob Winch	152f41f61e	SEC-2392: KeyBasedPersistenceTokenService uses bytes instead of bits The method setPseudoRandomNumberBits actually sets the number of bytes. This commit deprecates setPseudoRandomNumberBits and adds setPseudoRandomNumberBytes. The default value is still 256 to remain passive but will be updated in 4.x.	12 years ago
Rob Winch	7a3da28987	SEC-2479: Search parent context for AuthenticationManager	12 years ago
Rob Winch	e17adad878	SEC-2469: Support Spring LDAP 2.0.1+	12 years ago
Luke Taylor	058b9debef	Minor slapd config changes	12 years ago
Rob Winch	6c35c33abe	SEC-2447: Fix AuthenticationManagerBuilder ordering issues	12 years ago
Rob Winch	c42e13c966	loginProcessing test	12 years ago
Rob Winch	6b42a2eae1	SEC-2461: Multi WebSecurityConfiguration does not create null springSecurityFilterChain	12 years ago
Rob Winch	ec8b48150d	SEC-2474: Update poms	12 years ago
Rob Winch	4eff50b48b	SEC-2474: Update tests against Spring 4.0.1	12 years ago
Rob Winch	087b56da96	SEC-2473: Update to Spring 3.2.7	12 years ago
Rob Winch	8d8475deb1	SEC-2455: form-login@login-processing-url & logout@logout-url use matchers Remove the deprecation warnings of using setFilterProcessingUrl by invoking the matcher methods instead.	12 years ago
Rob Winch	b5f5665ea6	SEC-2463: CSRF documentation includes EnableWebMvcSecurity	12 years ago
Rob Winch	3b05fd6fed	SEC-2466: Add link to MultipartFilter in CSRF multipart section	12 years ago
Rob Winch	4c84805ac9	SEC-2466: CSRF MutipartFilter doc now uses <url-pattern>	12 years ago
james	a99c6db327	SEC-2467: Fix Small errors in itest-web's jsps	12 years ago
Rob Winch	1f833b0d6b	Add ExpressionUrlAuthorizationCOnfigurer tests - Demo custom expression root - Demo @Bean in expression example	12 years ago
Spring Buildmaster	add3aae6ef	Next development version	12 years ago
Rob Winch	f09ce267b3	Polish MVC doc	12 years ago

1 2 3 4 5 ...

5091 Commits (3.2.3.RELEASE) All Branches Search

5091 Commits (3.2.3.RELEASE)

All Branches