spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	1f481aafff	Fix AuthorizationFilter incorrectly extending OncePerRequestFilter Closes gh-12102	3 years ago
Marcus Da Coregio	ead587c597	Consistently handle RequestRejectedException if it is wrapped Closes gh-11645	4 years ago
Zhivko Delchev	e97c5a533b	Reverse content type check When MultipartFormData is enabled currently the CsrfWebFilter compares the content-type header against MULTIPART_FORM_DATA MediaType which leads to NullPointerExecption when there is no content-type header. This commit reverse the check to compare the MULTIPART_FORM_DATA MediaType against the content-type which contains null check and avoids the exception. closes gh-11204 Closes gh-11205	4 years ago
Rob Winch	cfc057b629	StrictHttpFirewall allows CJKV characters Closes gh-11264	4 years ago
Rob Winch	d94639a1bb	StrictHttpFirewall allows CJKV characters Closes gh-11264	4 years ago
Rob Winch	29b2b7a977	StrictHttpFirewall allows CJKV characters Closes gh-11264	4 years ago
Rob Winch	66d1cd592a	StrictHttpFirewall allows CJKV characters Closes gh-11264	4 years ago
Rob Winch	077c9e0b3e	StrictHttpFirewall allows CJKV characters Closes gh-11264	4 years ago
Marcus Da Coregio	b8b0661d73	Lock Dependencies for Release	4 years ago
Rob Winch	0dcb592b03	AntRegexRequestMatcher Optimization Closes gh-11234	4 years ago
Rob Winch	0ece0e6012	Extract rejectNonPrintableAsciiCharactersInFieldName Closes gh-11234	4 years ago
Rob Winch	7f121e82f4	AntRegexRequestMatcher Optimization Closes gh-11234	4 years ago
Rob Winch	9059fb3fc7	Extract rejectNonPrintableAsciiCharactersInFieldName Closes gh-11234	4 years ago
Rob Winch	1a9ec8a756	AntRegexRequestMatcher Optimization Closes gh-11234	4 years ago
Rob Winch	4967a0394f	Extract rejectNonPrintableAsciiCharactersInFieldName Closes gh-11234	4 years ago
Rob Winch	c6461d61ba	AntRegexRequestMatcher Optimization Closes gh-11234	4 years ago
Rob Winch	4405cf18f3	Extract rejectNonPrintableAsciiCharactersInFieldName Closes gh-11234	4 years ago
Rob Winch	70863952ae	AntRegexRequestMatcher Optimization Closes gh-11234	4 years ago
Rob Winch	af95be34c6	Extract rejectNonPrintableAsciiCharactersInFieldName Closes gh-11234	4 years ago
Marcus Da Coregio	9792e2a0fa	Use ServletContext in AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10908	4 years ago
Marcus Da Coregio	c67632225d	Use ServletContext in AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10908	4 years ago
Marcus Da Coregio	44508df940	AuthorizationManagerWebInvocationPrivilegeEvaluator grant access when AuthorizationManager abstains Closes gh-10950	4 years ago
Marcus Da Coregio	70b67cd2f1	AuthorizationManagerWebInvocationPrivilegeEvaluator grant access when AuthorizationManager abstains Closes gh-10950	4 years ago
Josh Cummings	f0c548cee7	Invert Log Messages Closes gh-10909	4 years ago
Josh Cummings	a09f6e15ad	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	7e0302be5c	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Josh Cummings	f53c65b3a0	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	0be772ff5b	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Marcus Da Coregio	893b651aea	RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext Closes gh-10779	4 years ago
Marcus Da Coregio	a041e7c943	RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext Closes gh-10779	4 years ago
Rob Winch	04f3bbcefa	javax.xml.bind:jaxb-api -> jakarta.xml.bind:jakarta.xml.bind-api Issue gh-10501	4 years ago
Rob Winch	c67ee6f2a8	javax.servlet:javax.servlet-api -> jakarta.servlet:jakarta.servlet-api Issue gh-10501	4 years ago
Josh Cummings	ca353d6781	Use noNullElements Collection#contains(null) does not work for all collection types Closes gh-10703	4 years ago
Josh Cummings	6c5ac0d8ec	Use noNullElements Collection#contains(null) does not work for all collection types Closes gh-10703	4 years ago
Marcus Da Coregio	60595f2801	Fix @since tag Issue gh-10590, gh-10554	4 years ago
Marcus Da Coregio	e7e3f06044	Fix @since tag Issue gh-10590, gh-10554	4 years ago
Marcus Da Coregio	994e93741b	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Marcus Da Coregio	04e1a11e35	Add RequestMatcherEntry	4 years ago
Marcus Da Coregio	547056d5cc	Introduce AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10590	4 years ago
Marcus Da Coregio	ba810e468f	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Marcus Da Coregio	40dfe8f259	Add RequestMatcherEntry	4 years ago
Marcus Da Coregio	b448954f43	Introduce AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10590	4 years ago
Eleftheria Stein	3389cf3ffc	Revert "Lock dependencies" This reverts commit `83bb4603f8`.	4 years ago
Marcus Da Coregio	cfbf28b8ba	Revert "Lock Dependencies for Release" This reverts commit `3d4e90ba2a`.	4 years ago
Eleftheria Stein	83bb4603f8	Lock dependencies	4 years ago
Marcus Da Coregio	3d4e90ba2a	Lock Dependencies for Release	4 years ago
Steve Riesenberg	65b3584ac6	Update copyright year Issue gh-10557	4 years ago
Steve Riesenberg	fa5b8c6090	Update copyright year Issue gh-10557	4 years ago
Steve Riesenberg	0be66d2cc0	Update copyright year Issue gh-10557	4 years ago
Steve Riesenberg	47b8860681	Update copyright year Issue gh-10557	4 years ago

1 2 3 4 5 ...

1189 Commits (5.6.9)