Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Issue #11495 - Add UriCompliance rules that follow the HTTP / URI / Servlet specs for illegal & suspicious characters #11496

Merged
merged 15 commits into from
Mar 27, 2024
Merged

Issue #11495 - Add UriCompliance rules that follow the HTTP / URI / Servlet specs for illegal & suspicious characters #11496

merged 15 commits into from
Mar 27, 2024

Commits on Mar 7, 2024

  1. Issue #11495 - Add UriCompliance rules that follow the HTTP / URI / S… 

    …ervlet specs for illegal & suspicious characters
    @joakime
    joakime committed Mar 7, 2024
    Configuration menu
    Copy the full SHA
    da02801 View commit details
    Browse the repository at this point in the history

  2. more illegalPathCharacterData test cases

    @joakime
    joakime committed Mar 7, 2024
    Configuration menu
    Copy the full SHA
    0c6c24d View commit details
    Browse the repository at this point in the history

  3. Fix comment

    @joakime
    joakime committed Mar 7, 2024
    Configuration menu
    Copy the full SHA
    abf6e34 View commit details
    Browse the repository at this point in the history

  4. Correcting SUSPICIOUS_PATH_CHARACTERS semantic (encoded and decoded)

    @joakime
    joakime committed Mar 7, 2024
    Configuration menu
    Copy the full SHA
    5dc8c91 View commit details
    Browse the repository at this point in the history

  5. Correct param handling

    @joakime
    joakime committed Mar 7, 2024
    Configuration menu
    Copy the full SHA
    9bd7b53 View commit details
    Browse the repository at this point in the history

Commits on Mar 8, 2024

  1. Optimizations 

    Check for illegal and suspicious characters as we are parsing the path.
Only look for ambiguous paths if we know there are dots or encodings.
    @gregw
    gregw committed Mar 8, 2024
    Configuration menu
    Copy the full SHA
    6fcf8d3 View commit details
    Browse the repository at this point in the history

  2. preserve parameter

    @gregw
    gregw committed Mar 8, 2024
    Configuration menu
    Copy the full SHA
    9aad84b View commit details
    Browse the repository at this point in the history

  3. fixed tests

    @gregw
    gregw committed Mar 8, 2024
    Configuration menu
    Copy the full SHA
    977861d View commit details
    Browse the repository at this point in the history

Commits on Mar 9, 2024

  1. Fix tests

    @gregw
    gregw committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    77bbd86 View commit details
    Browse the repository at this point in the history

  2. Fix tests

    @gregw
    gregw committed Mar 9, 2024
    Configuration menu
    Copy the full SHA
    bb11acb View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2024

  1. Updating tests

    @joakime
    joakime committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    c578b24 View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/fix/12.0.x/uricompliance-reject-… 

    …backslash' into fix/12.0.x/uricompliance-reject-backslash

# Conflicts:
#	jetty-ee10/jetty-ee10-servlet/src/test/java/org/eclipse/jetty/ee10/servlet/DefaultServletTest.java
    @joakime
    joakime committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    c6c2fb9 View commit details
    Browse the repository at this point in the history

Commits on Mar 22, 2024

  1. Merge remote-tracking branch 'origin/jetty-12.0.x' into fix/12.0.x/ur… 

    …icompliance-reject-backslash
    @joakime
    joakime committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    50d8c94 View commit details
    Browse the repository at this point in the history

Commits on Mar 27, 2024

  1. Safer parse by not allowing beyond a final state

    @gregw
    gregw committed Mar 27, 2024
    Configuration menu
    Copy the full SHA
    fed10f7 View commit details
    Browse the repository at this point in the history

  2. Revert "Safer parse by not allowing beyond a final state" 

    This reverts commit fed10f7.
    @joakime
    joakime committed Mar 27, 2024
    Configuration menu
    Copy the full SHA
    dc62a70 View commit details
    Browse the repository at this point in the history