- 19 2月, 2015 9 次提交
-
-
由 Rossen Stoyanchev 提交于
Issue: SPR-12728
-
由 Rossen Stoyanchev 提交于
Issue: SPR-12727
-
由 Juergen Hoeller 提交于
-
由 Juergen Hoeller 提交于
-
由 Sebastien Deleuze 提交于
This commit adds support for a same origin check that compares Origin header to Host header. It also changes the default setting from all origins allowed to only same origin allowed. Issues: SPR-12697, SPR-12685 (cherry picked from commit 6062e155)
-
由 Sebastien Deleuze 提交于
This commit introduces the following changes: - Requests without Origin header are not rejected anymore - Disable Iframe when allowedOrigins is not empty and not equals to * - The Iframe is not cached anymore in order to have a reliable origin check - allowedOrigins must not be null or empty - allowedOrigins format is now validated (should be * or start by http(s)://) Issue: SPR-12660 (cherry picked from commit 9b3319b3)
-
由 Sebastien Deleuze 提交于
Issue: SPR-12724 (cherry picked from commit 8159aa99)
-
由 Juergen Hoeller 提交于
Issue: SPR-12723 (cherry picked from commit 61cc3b5b)
-
由 Juergen Hoeller 提交于
Issue: SPR-12709 (cherry picked from commit 1273c90a)
-
- 18 2月, 2015 2 次提交
-
-
由 Sam Brannen 提交于
- Added assertions for pre-conditions on method arguments for all public utility methods. - Introduced additional tests in TestPropertySourceUtilsTests to verify the new pre-conditions. - Introduced INLINED_PROPERTIES_PROPERTY_SOURCE_NAME constant for the name of the MapPropertySource created from inlined properties; the name therefore no longer contains the inlined properties, but the original values of the inlined properties can now be logged at debug level. - Simplified tests in InlinedPropertiesTestPropertySourceTests. Issue: SPR-12721 (cherry picked from commit 42af3303)
-
由 Sam Brannen 提交于
(cherry picked from commit 0267715c)
-
- 17 2月, 2015 3 次提交
-
-
由 Sam Brannen 提交于
Spring Framework 4.1 introduced support for @TestPropertySource; however, the utilities used to parse inlined properties and add test property sources to the environment are currently private which prevents reuse by third-party frameworks like Spring Boot. This commit addresses this issue by making such utilities public. - TestPropertySourceUtils is now a public class. - Various utility methods in TestPropertySourceUtils have been made public. - addResourcePropertySourcesToEnvironment() has been renamed to addPropertiesFilesToEnvironment(). - extractEnvironmentProperties() has been renamed to convertInlinedPropertiesToMap(). - All public methods in TestPropertySourceUtils are now fully documented. Issue: SPR-12721 (cherry picked from commit 75e0bc92)
-
由 Sam Brannen 提交于
The initial implementation for adding inlined properties configured via @TestPropertySource to the context's environment did not preserve the order in which the properties were physically declared. This makes @TestPropertySource a poor testing facility for mimicking the production environment's configuration if the property source mechanism used in production preserves ordering of property names -- which is the case for YAML-based property sources used in Spring Boot, Spring Yarn, etc. This commit addresses this issue by ensuring that the ordering of inlined properties declared via @TestPropertySource is preserved. Specifically, the original functionality has been refactored. extracted from AbstractContextLoader, and moved to TestPropertySourceUtils where it may later be made public for general purpose use in other frameworks. Issue: SPR-12710 (cherry picked from commit d6a799ad)
-
由 Rossen Stoyanchev 提交于
Before this change the WebSocketTransportHandler passed Collections.emptyMap as attributes to the HandshakeHandler because it didn't matter what attributes the underlying WebSocketSession has since it is wrapped by the SockJsSession and that's what exposed for use everywhere. This change has the WebSocketTransportHandler passing the attributes from the SockJsSession instead since it's more accurate for the underlying WebSocketSession to have access to the same map instance and it allows the HandshakeHandler to change the attributes even if it doesn't need to do that today. Issue: SPR-12716
-
- 13 2月, 2015 1 次提交
-
-
由 Sam Brannen 提交于
This commit introduces further regression tests to ensure proper parsing of inlined properties configured via @TestPropertySource. Specifically, these additional tests ensure that we do not introduce a bug like the one raised in Spring Boot issue #1110 [0]. [0] https://github.com/spring-projects/spring-boot/issues/1110 Issue: SPR-12710 (cherry picked from commit 67934a22)
-
- 12 2月, 2015 4 次提交
-
-
由 Andy Wilkinson 提交于
Jasper Reports’ transitive dependency on spring-context (via castor-xml which is a new dependency in 6.0.3) was being mapped by Gradle to a dependency on the spring-context project. For reasons that I do not fully understand this was causing -source and -javadoc jars to be added to the project's compile classpath which is used by the Animal Sniffer Ant task. When the task runs these jars do not exist which causes it to fail. This commit fixes the problem by adding an exclusion of org.springframework:spring-context to the Jasper Reports dependencies in spring-context-support and spring-webmvc. (cherry picked from commit 7a6a1320)
-
由 Juergen Hoeller 提交于
-
由 Juergen Hoeller 提交于
Combined backport of Jackson configuration enhancements: Locale/TimeZone settings, refined module configuration Issue: SPR-12594 Issue: SPR-12634
-
由 Stephane Nicoll 提交于
Previously, only indexed access for collections were supported. When attempting to access the element of an array that had not the requested size, the call would fail with an IndexOutOfBoundException This commit harmonize the binding support so that the array is updated according to the requested index if necessary. Issue: SPR-12706 (cherry picked from commit aa213396)
-
- 11 2月, 2015 5 次提交
-
-
由 Juergen Hoeller 提交于
-
由 Juergen Hoeller 提交于
(cherry picked from commit 058714b0)
-
由 Juergen Hoeller 提交于
Issue: SPR-12655 (cherry picked from commit 7585be85)
-
由 Juergen Hoeller 提交于
Issue: SPR-12694 (cherry picked from commit 981aefc2)
-
由 Juergen Hoeller 提交于
Issue: SPR-12688 (cherry picked from commit 918bc3b1)
-
- 10 2月, 2015 1 次提交
-
-
由 Rossen Stoyanchev 提交于
Before this change, detection of X-Forwarded-* headers was only built into ServletUriComponentsBuilder. This change adds a new method for creating a UriComponentsBuilder from an existing HttpRequest. This is equivalent to the fromUri method + X-Forwarded-* header values.
-
- 09 2月, 2015 10 次提交
-
-
由 Brian Clozel 提交于
Prior to this commit, HTTP responses without body (response status 204 or 304, Content-Length: 0) were handled properly by RestTemplates. But some other cases were not properly managed, throwing exceptions for valid HTTP responses. This commit better handles HTTP responses, using a response wrapper that can tell if a response: * has no message body (HTTP status 1XX, 204, 304 or Content-Length:0) * has an empty message body This covers rfc7230 Section 3.3.3. Issue: SPR-8016
-
由 Brian Clozel 提交于
Prior to this change, the `ResourceUrlProvider.getForLookupPath` method would try to match handlers using the keySet order in the handlerMappings Map. In case of several matches, the handler used for the return value could vary, since the registration order in the handlerMappings can't be guaranteed in the configuration. This commit now collects all matching handlers and sort them using a `PatternComparator`, in order to try each handler from the most specific mapping to the least. Issue: SPR-12647
-
由 Brian Clozel 提交于
Prior to this commit, the `ContentCachingRequestWrapper` class would cache the response content only if the reponse would be consumed using its InputStream. In case of a Form request, Spring MVC consumes the response using the `getParameter*` Servlet API methods. This causes the cached content to never be written. This commit makes the `ContentCachingResponseWrapper` write the request body to the cache buffer by using the `getParameter*` API, thus avoiding those issues. Issue: SPR-7913
-
由 Brian Clozel 提交于
Prior to this change, the ResourceUrlProvider would listen to ContextRefreshedEvents and autodetect resource handlers each time. This can cause issues when multiple contexts are involved and the last one has no resource handler, thus clearing the previously detected ones. This commit disables resource handlers auto-detection once some have been detected with a refreshed context. Issue: SPR-12592
-
由 Brian Clozel 提交于
Prior to this change, location paths used for resource handling would not allow "non-cleaned, relative paths" such as `file://home/user/static/../static/`. When checking if the resolved resource's path starts with the location path, a mismatch would happen when comparing for example: * the location `file://home/user/static/../static/` * and the resource `file://home/user/static/resource.txt` This commit cleans the location path before comparing it to the resource path. Issue: SPR-12624
-
由 Brian Clozel 提交于
This commit allows the use of "protcol relative URLs" (i.e. URLs without scheme, starting with `//`), often used to serve resources automatically from https or http with third party domains. This syntax is allowed by RFC 3986. Issue: SPR-12632
-
由 Brian Clozel 提交于
This commit fixes the default value for the contextRelative attribute of a RedirectView, when this view is registered via a RedirectViewController in XML. The value is set to true. Note that the default value for this is correctly documented in spring-mvc-4.1.xsd. Also, the documentation and implementation for its javadoc counterpart also enforces true as a default value. Issue: SPR-12607
-
由 Stephane Nicoll 提交于
Update documentation to explicitly mention that the cache interceptor must be fully initialized to provide the expected behavior and therefore initialization code should not rely on this feature, i;e. typically in PostConstruct callback. Since the Transactional infrastructure has the exact same infrastructure, update that section of the doc as well. Issue: SPR-12700
-
由 Stephane Nicoll 提交于
Add required `@Deprecated` annotation.
-
由 Stephane Nicoll 提交于
Previously, one could only set the list of bean names to exclude from auto-detection and there was no way to add additional bean names. MBeanExporter now exposes a addExcludedBean method that can be invoked during the initialization phase to add bean names to ignore. Issue: SPR-12686
-
- 03 2月, 2015 3 次提交
-
-
由 Rossen Stoyanchev 提交于
Issue: SPR-12650
-
由 Rossen Stoyanchev 提交于
This change deprecates the maxRequestSize property and adds maxResponseSize instead. The latter is required to create Netty's HttpObjectAggregator and aggregates responses. The maxRequestSize property is already removed in the master branch and will not be available starting with 4.2. Issue: SPR-12623
-
由 Rossen Stoyanchev 提交于
Prior to this change when adding subscriptions DefaultSubscriptionRegistry (incorrectly) made a copy of the given map for its "access" cache rather than for its "update" cache. Issue: SPR-12665
-
- 02 2月, 2015 1 次提交
-
-
由 Stephane Nicoll 提交于
Provide an additional hook-point for YamlProcessor subclasses willing to change how the Yaml instance is configured. Also expose the default StrictMapAppenderConstructor so that they can compose a custom instance with it. Issue: SPR-12671
-
- 24 1月, 2015 1 次提交
-
-
由 Sam Brannen 提交于
Spring Framework 4.0 introduced support for using test-related annotations as meta-annotations in the Spring TestContext Framework (TCF) in order to create custom composed annotations within a test suite; however, the detection of default @Configuration classes in test classes was not updated to search for @Configuration declared as a meta-annotation. Specifically, AnnotationConfigContextLoaderUtils invokes Class.isAnnotated() which only searches for annotations declared directly on the class in question. This commit addresses this issue by refactoring the isDefaultConfigurationClassCandidate() method in AnnotationConfigContextLoaderUtils so that it uses AnnotationUtils.findAnnotation() instead of Class.isAnnotated() for detecting the presence of the @Configuration annotation, either directly or as a meta-annotation. Issue: SPR-12659 (cherry picked from commit 2d918380)
-