Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.Sign up
ResourceUrlEncodingFilter does not work with HttpServletRequestWrapper [SPR-17421] #21954
This is effectively reopening of #17152 I was able to reproduce this without Spring Security via a Filter that wraps the HttpServletRequest. See https://github.com/rwinch/spring-framework-issues/tree/SPR-12550-Security/SPR-12550 There are instructions in the README for reproducing.
HI, I see this has been resolved through #21521. One followup question: #21521 lists Fix Version/s of 5.1.2, but this ticket lists out three Fix Version/s (4.3.21, 5.0.11, 5.1.2). Our application uses Spring 4 right now, so getting the fix in 4.3.21 would be optimal for us. Would that be possible?
Brian Clozel commented
This issue has been resolved here, not through #21521. The fix has been backported to 4.3.x and 5.0.x branches, so this will be available in 4.3.21, 5.0.11 and 5.1.2.