Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Commits on May 11, 2015
  1. @jhoeller

    Backported DispatcherServlet and ServletContextResourcePatternResolve…

    jhoeller authored
    …r refinements
    
    Issue: SPR-13011
Commits on Mar 23, 2015
  1. @jhoeller

    Polishing

    jhoeller authored
Commits on Mar 6, 2015
  1. @jhoeller

    Polishing

    jhoeller authored
    (cherry picked from commit 7ed7f98)
Commits on Mar 2, 2015
  1. @jhoeller

    Polishing

    jhoeller authored
Commits on Feb 27, 2015
  1. @bclozel

    Allow file locations for resource handling

    bclozel authored
    Prior to this change, location checks for serving resources would append
    `/` to the location path it didn't already have one.
    
    This commit makes sure not to append a `/` if the provided location is
    actually a file.
    
    Issue: SPR-12747
Commits on Feb 19, 2015
  1. @jhoeller

    Consistent validation logic

    jhoeller authored
    Issue: SPR-12655
  2. @jhoeller

    Revised validation javadoc

    jhoeller authored
    Issue: SPR-12655
Commits on Feb 18, 2015
  1. @jhoeller

    ServletUriComponentsBuilder.java avoids NPE on scheme check

    jhoeller authored
    Issue: SPR-12723
    (cherry picked from commit 61cc3b5)
Commits on Dec 30, 2014
  1. @snicoll
  2. @snicoll

    Restore JDK 5 compatiblity

    snicoll authored
Commits on Dec 29, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
    (cherry picked from commit e9d24d5)
  2. @jhoeller

    HandlerExecutionChain prevents re-adding the interceptors array to th…

    jhoeller authored
    …e list (and declares varargs now)
    
    Issue: SPR-12566
    (cherry picked from commit 37713ae)
Commits on Nov 24, 2014
  1. @bclozel @jhoeller

    Fix location checks for servlet 3 resources

    bclozel authored jhoeller committed
    SPR-12354 applied new checks to make sure that served static resources
    are under authorized locations.
    
    Prior to this change, serving static resources from Servlet 3 locations
    such as "/webjars/" would not work since those locations can be within
    one of the JARs on path. In that case, the checkLocation method would
    return false and disallow serving that static resource.
    
    This change fixes this issue by making sure to call the
    `ServletContextResource.getPath()` method for servlet context resources.
    
    Note that there's a known workaround for this issue, which is using a
    classpath scheme as location, such as:
    "classpath:/META-INF/resources/webjars/" instead of "/webjars".
    
    Issue: SPR-12432
    (cherry picked from commit 1214624)
Commits on Nov 22, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
    (cherry picked from commit 2675ce7)
Commits on Nov 11, 2014
  1. @rstoyanchev @snicoll

    Apply extra checks to static resource handling

    rstoyanchev authored snicoll committed
    - remove leading '/' and control chars
    - improve url and relative path checks
    - account for URL encoding
    - add isResourceUnderLocation final verification
    
    Issue: SPR-12354
Commits on Nov 2, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
Commits on Nov 1, 2014
  1. @jhoeller

    TilesConfigurer defensively expects null from getResources in case of…

    jhoeller authored
    … no resources found
    
    Also includes order preservation for resource results with Tiles 2 as well as retrieval failure logging with Tiles 3.
    
    Issue: SPR-12362
    (cherry picked from commit c8b8dc5)
  2. @jhoeller

    Set ResponseStatusExceptionResolver.messageSource in the MVC Java config

    jhoeller authored
    Issue: SPR-12380
    (cherry picked from commit aa82da8)
Commits on Sep 17, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
Commits on Aug 22, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
  2. @jhoeller

    Consistent attribute documentation/formatting in spring-context and s…

    jhoeller authored
    …pring-mvc schemas
    
    (cherry picked from commit b5763fe)
  3. @jhoeller

    DispatcherServlet's checkMultipart detects wrapped MultipartRequest a…

    jhoeller authored
    …s well
    
    Issue: SPR-12114
    (cherry picked from commit 786fd92)
Commits on Aug 13, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
Commits on Aug 11, 2014
  1. @jhoeller
Commits on Jul 29, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
  2. @jhoeller

    Polishing

    jhoeller authored
Commits on Jul 28, 2014
  1. @jhoeller

    SelectedValueComparator defensively handles null values in exhaustive…

    jhoeller authored
    …Compare
    
    Issue: SPR-12001
    (cherry picked from commit 980f971)
Commits on Jul 2, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
    (cherry picked from commit ede2150)
Commits on Jul 1, 2014
  1. @jhoeller

    Package javadoc cleanup for web.servlet.mvc, removing outdated refere…

    jhoeller authored
    …nces
    
    Issue: SPR-11935
    (cherry picked from commit 7396210)
  2. @jhoeller

    Polishing (backported from master)

    jhoeller authored
    (cherry picked from commit 48f753f)
Commits on Apr 27, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
Commits on Apr 2, 2014
  1. @jhoeller

    Revised ByteArrayOutputStream handling in MarshallingView and co

    jhoeller authored
    Issue: SPR-11646
    (cherry picked from commit 8006696)
  2. @jhoeller

    ResourceHttpRequestHandler explicitly closes a Resource's InputStream

    jhoeller authored
    Issue: SPR-11644
    (cherry picked from commit 3a96f16)
  3. @jhoeller

    Polishing

    jhoeller authored
    Issue: SPR-11262
    (cherry picked from commit d628025)
Commits on Mar 24, 2014
  1. @jhoeller

    Polishing

    jhoeller authored
Something went wrong with that request. Please try again.