Skip to content
Permalink
Branch: master
Commits on Oct 10, 2019
  1. Ensure java 1.8 bytecode is targeted

    jodersky committed Oct 10, 2019
Commits on Aug 1, 2019
  1. update readme

    jodersky committed Aug 1, 2019
Commits on Jun 10, 2019
  1. Fork: rename organization

    jodersky committed Apr 9, 2018
  2. Add support for ScalaJS and Scala Native

    jodersky committed Mar 7, 2018
    Binary compatibility with previous versions is maintained.
Commits on May 31, 2019
Commits on May 22, 2019
  1. Update to 2.13.0-RC2 (spray#296)

    raboof authored and jrudolph committed May 22, 2019
Commits on Apr 15, 2019
  1. Update scala 2.13.0-M5 to 2.13.0-RC1 (spray#294)

    Philippus authored and raboof committed Apr 15, 2019
    * Update specs2 to 4.5.1
    
    * Update scala 2.13.0-M5 to 2.13.0-RC1
    
    * Replace deprecated unicode arrows
    
    * Replace deprecated symbol literals
    
    * Update scala 2.12.7 to 2.12.8
    
    * Update sbt to 1.2.8
    
    * Update sbt-osgi to 0.9.5
    
    * Update dependencies for scala 2.10.x
Commits on Nov 9, 2018
Commits on Nov 8, 2018
  1. Next version

    jrudolph committed Nov 8, 2018
  2. Add 1.3.5 release notes

    jrudolph committed Nov 8, 2018
  3. Seal JsonParserSetting trait

    jrudolph committed Nov 8, 2018
    It shouldn't be extended but be used as shown.
  4. Bump version to 1.3.5

    jrudolph committed Nov 8, 2018
  5. Merge pull request spray#283 from jrudolph/limit-size-of-numbers

    jrudolph committed Nov 8, 2018
    CVE-2018-18853 Limit the number of characters for numbers in the parser, fixes spray#278
Commits on Nov 7, 2018
  1. CVE-2018-18853 Limit the number of characters for numbers in the pars…

    jrudolph committed Oct 30, 2018
    …er, fixes spray#278
    
    BigInteger/BigDecimal seems to have approx. quadratic runtime for instantiating big numbers
    from Strings. Lacking a better solution we introduce a character limit for
    numbers. According to the benchmarks from spray#278, at 100 digits the constant/linear
    parts still predominate over the quadratic slowdowns seen with 10000+ digits.
  2. Merge pull request spray#284 from jrudolph/fix-uncontrolled-recursion

    jrudolph committed Nov 7, 2018
    CVE-2018-18855 Fix uncontrolled recursion in JsonParser
  3. Merge pull request spray#285 from spray/jrudolph-patch-1

    jrudolph committed Nov 7, 2018
    Travis: add workspace caching (ivy/sbt)
  4. Merge pull request spray#280 from jrudolph/use-TreeMap-fixes-277

    jrudolph committed Nov 7, 2018
    CVE-2018-18854 Use TreeMap instead of HashMap for JsObject key/value pairs, fixes spray#277
  5. CVE-2018-18855 Fix uncontrolled recursion in the JsonParser by imposi…

    jrudolph committed Nov 6, 2018
    …ng a configurable limit on the depth, fixes spray#286
  6. CVE-2018-18854 Use TreeMap instead of HashMap for JsObject key/value …

    jrudolph committed Oct 30, 2018
    …pairs, fixes spray#277
    
    The problem is that with String's hashCode implementation it is too simple to
    create synthetic collisions. This allows an attacker to create an object with
    keys that all collide which leads to a performance drop for the HashMap
    just for creating the map in the first place. See scala/bug#11203
    for more information about the underlying HashMap issue.
    
    For the time being, it seems safer to use a TreeMap which uses String ordering.
    Benchmarks suggest that using a TreeMap is only ~6% slower for reasonably sized JSON objects
    up to 100 keys.
    
    Benchmark for non-colliding keys:
    
    Benchmark                         (_size)  (parser)   Mode  Cnt        Score       Error  Units
    ExtractFieldsBenchmark.readSpray        1   HashMap  thrpt    5  1195832.262 ± 64366.605  ops/s
    ExtractFieldsBenchmark.readSpray        1   TreeMap  thrpt    5  1342009.641 ± 17307.555  ops/s
    ExtractFieldsBenchmark.readSpray       10   HashMap  thrpt    5   237173.327 ± 70341.742  ops/s
    ExtractFieldsBenchmark.readSpray       10   TreeMap  thrpt    5   233510.618 ± 69638.750  ops/s
    ExtractFieldsBenchmark.readSpray      100   HashMap  thrpt    5    23202.016 ±  1514.763  ops/s
    ExtractFieldsBenchmark.readSpray      100   TreeMap  thrpt    5    21899.072 ±   823.225  ops/s
    ExtractFieldsBenchmark.readSpray     1000   HashMap  thrpt    5     2073.754 ±    66.093  ops/s
    ExtractFieldsBenchmark.readSpray     1000   TreeMap  thrpt    5     1793.329 ±    43.603  ops/s
    ExtractFieldsBenchmark.readSpray    10000   HashMap  thrpt    5      208.160 ±     7.466  ops/s
    ExtractFieldsBenchmark.readSpray    10000   TreeMap  thrpt    5      160.349 ±     5.809  ops/s
  7. Merge pull request spray#282 from jrudolph/introduce-JsonParserSettings

    jrudolph committed Nov 7, 2018
    Introduce JsonParserSettings to allow customization of parsing
Commits on Oct 30, 2018
Commits on Oct 23, 2018
  1. Merge pull request spray#274 from xuwei-k/jdk11

    jrudolph committed Oct 23, 2018
    add jdk11 test
  2. sbt 1.2.6 (spray#276)

    xuwei-k authored and jrudolph committed Oct 23, 2018
  3. Merge pull request spray#279 from jrudolph/update-to-scala-2.12.7

    jrudolph committed Oct 23, 2018
    Update to Scala 2.12.7
  4. add jdk11 test

    xuwei-k committed Oct 6, 2018
  5. Update to Scala 2.12.7

    jrudolph committed Oct 23, 2018
  6. Merge pull request spray#275 from xuwei-k/Scala-2.13.0-M5

    jrudolph committed Oct 23, 2018
    Scala 2.13.0-M5
Commits on Oct 14, 2018
  1. Scala 2.13.0-M5

    xuwei-k committed Oct 14, 2018
Commits on Aug 7, 2018
  1. Add support for Scala 2.13.0-M4 (spray#263)

    xuwei-k authored and jrudolph committed Aug 7, 2018
  2. Merge pull request spray#269 from jrudolph/update-dependencies

    jrudolph committed Aug 7, 2018
    Update dependencies
  3. Remove 2.13.0-M3 support for now

    jrudolph committed Jul 26, 2018
    Isn't current any more and support for 2.13.0-M4 will be added later.
Older
You can’t perform that action at this time.