1. 22 3月, 2019 1 次提交
  2. 08 8月, 2018 1 次提交
  3. 11 5月, 2018 1 次提交
    • R
      Remove individual detection of forwarded headers · 4da43de7
      Rossen Stoyanchev 提交于
      This commit removes all places where forwarded headers are checked
      implicitly, on an ad-hoc basis.
      
      ForwardedHeaderFilter is expected to be used instead providing
      centralized control over using or discarding such headers.
      
      Issue: SPR-16668
      4da43de7
  4. 09 1月, 2018 2 次提交
    • S
      Polishing · 9c7de232
      sdeleuze 提交于
      Optimize same origin check when the request is an instance of
      ServletServerHttpRequest and when there is no forwarded headers.
      
      This commit also optimizes the getPort methods and ForwardedHeaderFilter
      forwarded headers checks.
      
      Issue: SPR-16262
      9c7de232
    • S
      Refine forwarded protocol support · c326e444
      sdeleuze 提交于
      This commit refines forwarded protocol support in order to support
      proxies that only set "X-Forwarded-Proto" header and not
      "X-Forwarded-Port" by performing a reset of the port in such case.
      
      "Forwarded" header support has been updated accordingly since it
      also supports similar use case, as described in SPR-15504.
      
      Issue: SPR-16262
      c326e444
  5. 21 10月, 2017 1 次提交
  6. 20 7月, 2016 1 次提交
  7. 05 7月, 2016 1 次提交
  8. 15 10月, 2015 1 次提交
  9. 02 10月, 2015 1 次提交
  10. 28 9月, 2015 1 次提交
    • S
      Avoid stacktrace for invalid Origin header values · 9c66dfa7
      Sebastien Deleuze 提交于
      This commit adds support for origins with a trailing slash or a path,
      in order to avoid printing a stacktrace in the logs when
      WebUtils#isSameOrigin(HttpRequest) parses such invalid Origin header
      value.
      
      Issue: SPR-13478
      9c66dfa7
  11. 13 7月, 2015 1 次提交
    • S
      Avoid rejecting same-origin requests detected as CORS requests · 84138abf
      Sebastien Deleuze 提交于
      Browsers like Chrome or Safari include an Origin header for same-origin
      POST/PUT/DELETE requests, not only for cross-origin requests.
      
      Before this commit, these same-origin requests would have been detected
      as potential cross-origin requests, and rejected if the same-origin domain
      is not part of the configured allowedOrigins.
      
      This commit avoid to reject same-origin requests by reusing the logic
      introduced in Spring 4.1 for detecting reliably Websocket/SockJS
      same-origin requests with the WebUtils.isValidOrigin() method. This
      logic has been extracted in a new WebUtils.isSameOrigin() method.
      
      Issue: SPR-13206
      84138abf
  12. 04 5月, 2015 1 次提交
  13. 19 2月, 2015 1 次提交
  14. 18 2月, 2015 1 次提交
  15. 21 10月, 2014 1 次提交
  16. 29 8月, 2012 1 次提交
    • R
      Add support for matrix variables · 2201dd8c
      Rossen Stoyanchev 提交于
      A new @MatrixVariable annotation allows injecting matrix variables
      into @RequestMapping methods. The matrix variables may appear in any
      path segment and should be wrapped in a URI template for request
      mapping purposes to ensure request matching is not affected by the
      order or the presence/absence of such variables. The @MatrixVariable
      annotation has an optional "pathVar" attribute that can be used to
      refer to the URI template where a matrix variable is located.
      
      Previously, ";" (semicolon) delimited content was removed from the
      path used for request mapping purposes. To preserve backwards
      compatibility that continues to be the case (except for the MVC
      namespace and Java config) and may be changed by setting the
      "removeSemicolonContent" property of RequestMappingHandlerMapping to
      "false". Applications using the  MVC namespace and Java config do not
      need to do anything further to extract and use matrix variables.
      
      Issue: SPR-5499, SPR-7818
      2201dd8c
  17. 31 1月, 2012 1 次提交
    • C
      Rename modules {org.springframework.*=>spring-*} · 02a4473c
      Chris Beams 提交于
      This renaming more intuitively expresses the relationship between
      subprojects and the JAR artifacts they produce.
      
      Tracking history across these renames is possible, but it requires
      use of the --follow flag to `git log`, for example
      
          $ git log spring-aop/src/main/java/org/springframework/aop/Advisor.java
      
      will show history up until the renaming event, where
      
          $ git log --follow spring-aop/src/main/java/org/springframework/aop/Advisor.java
      
      will show history for all changes to the file, before and after the
      renaming.
      
      See http://chrisbeams.com/git-diff-across-renamed-directories
      02a4473c
  18. 16 9月, 2011 1 次提交
  19. 29 8月, 2011 1 次提交
  20. 05 2月, 2009 1 次提交
  21. 21 11月, 2008 1 次提交
  22. 03 11月, 2008 1 次提交
  23. 29 10月, 2008 1 次提交