Vaadin Flow 6.0.5

Vaadin Flow 6.0.5

Changes in Flow from 6.0.4

• Fixes:

  • ⧉ Store spring csrf to bootstrap page. PR:10577

    Stores spring CSRF token into meta tags into the bootstrap page, which is used for login() and logout() helpers. It has the benefit that login and logout are now Spring CSRF protected, we no longer need to ingore Spring CSRF protection for login like http.csrf().ignoringAntMatchers("/login");

  • ⧉ Force pnpm version <= 5 (#10576). PR:10587. Ticket:10571

    pnpm >= 6.0.0 requires at least Node.js v12.17. This requirement may not be satisfied as framework current accepts Node.js 10. pnpm 6.0 can be used with newer Node.js versions if the versions check is disabled with vaadin.ignoreVersionChecks=true. But in pnpm 6 the pnpmfile.js is renamed to .pnpmfile.cjs and thus the Flow generated pnpmfile.js will not be used by pnpm - meaning that versions are not locked.

  • ⧉ Consider first added route as main route and always return it first (#10556). PR:10566. Ticket:10528

  • ⧉ Don't use ErrorHandler for IOExceptions in StreamReceiverHandler. PR:10553. Ticket:10351

  • ⧉ Use getContentLengthLong instead getContentLength (#10506). PR:10538. Ticket:10392

    Use Servlet 3.1 ServletRequest::getContentLengthLong to get the content size as a long value for the big files upload, because getContentLength may return -1 (file size is bigger than int capacity).

  • ⧉ Provide info on file name when Json parsing fails. PR:10423. Ticket:10323

    Adds the package file name to exception message in case of JsonException in order to provide clean explanation where to look into.

  • ⧉ Allow spaces between html function call and back tick. PR:10523. Ticket:8881

• ⧉ All changes