71a9eb7102
Add section on RFD + whitelist yml/properties/csv
...
Issue: SPR-13643
2015-11-05 19:42:30 -05:00
e190f26669
No Content-Disposition if HTML in the request mapping
...
Issue: SPR-13629
2015-11-02 13:13:37 -05:00
0f1897d376
Further improve Detect custom CNVR
...
Refine the approach of having <mvc:view-resolvers> detect and use the
ContentNegotiationManager instance registered with
<mvc:annotation-driven> introduced in the last commit.
Issue: SPR-13559
2015-10-29 20:53:36 -04:00
563a120280
Detect custom ContentNegotiationViewResolver
...
The <mvc:annotation-driven> element now adds an alias when a
ContentNegotiationManager bean is registered with a custom name.
This helps <mvc:view-resolvers> to more reliably find such a custom
ContentNegotiationManager.
Issue: SPR-13559
2015-10-29 18:06:45 -04:00
78fc5bbecc
Don't throw NPE when serving webjar directories
...
Prior to this change, serving resources with ResourceHttpRequestHandler
could result in NPE when requesting an existing folder located in a JAR.
This commit swallows those exceptions, as it is not possible to foresee
those cases without reading the actual resource. This result in a HTTP
200 response with a zero Content-Length instead of a HTTP 500 internal
exception.
Issue: SPR-13620
2015-10-29 16:48:55 +01:00
a879897063
Skip Content-Disposition header if status != 2xx
...
Issue: SPR-13588
2015-10-26 16:11:20 -04:00
0016752ad8
Next Development Version
2015-10-15 02:40:06 -07:00
a95c3d820d
Protect against RFD exploits
...
Issue: SPR-13548
2015-10-15 10:32:51 +02:00
271e5fd76a
Reverted StrictMapAppenderConstructor constructor back to public
...
Issue: SPR-13504
(cherry picked from commit 627393a
2015-10-14 15:24:25 +02:00
5d36ac08ef
Added missing @since tags to DeferredResult
2015-10-14 14:48:48 +02:00
49393e54a1
Build 4.1.8 SNAPSHOTs
2015-10-14 10:42:07 +02:00
302a069257
AbstractFileResolvingResource uses extractArchiveURL for last-modified check
...
Issue: SPR-13393
2015-10-13 20:09:21 +02:00
c33c26ac5d
Support for GlassFish 4.1.1 (Tyrus 1.9 - 1.12)
...
Issue: SPR-13566
2015-10-13 20:09:13 +02:00
0086dd830b
Enforce cacheLimit in DefaultSubscriptionRegistry
...
When the cacheLimit is reached and there is an eviction from the
updateCache, the accessCache is now also updated.
This change also ensures that adding a destination to the cache is
protected with synchronization on the updateCache.
Issue: SPR-13555
2015-10-13 12:28:27 -04:00
799a03e98d
Polishing
2015-10-13 16:44:51 +02:00
c0b6d320f1
Updated compatibility statements in RequestUpgradeStrategy javadocs
2015-10-13 12:31:35 +02:00
d7a418356e
Upgrade to Tomcat 8.0.28
2015-10-13 11:52:22 +02:00
13283ec918
Polishing
2015-10-12 23:24:36 +02:00
ca60d796a8
Clarified that getBody() never returns null
...
As the only place that historically differed, HttpComponents(Async)ClientHttpResponse returns an empty stream instead of null now.
Issue: SPR-13563
(cherry picked from commit a5f81a0
2015-10-12 23:24:29 +02:00
16cb73673e
Fixed ContentNegotiationManager reference in MVC docs
...
Issue: SPR-13558
2015-10-10 22:54:26 +02:00
196adbd459
Polishing
2015-10-10 22:43:51 +02:00
de932903ca
Reliable null value handling in ConcurrentMapCache, GuavaCache, JCacheCache
...
The 4.1 variant of this fix just introduces readResolve declarations to the existing NullHolder classes.
Issue: SPR-13553
2015-10-10 22:43:06 +02:00
57125c0adc
AbstractApplicationContext refinements (backported from 4.2.2)
...
Shutdown hook triggers doClose within startupShutdownMonitor; allow for re-refresh and re-close.
Issue: SPR-13556
Issue: SPR-13425
2015-10-10 22:35:05 +02:00
50c59425d9
Consistently detect spring-beans.dtd reference in last path segment
...
Issue: SPR-13549
(cherry picked from commit 8b3b8d0
2015-10-10 22:23:14 +02:00
fe36334232
Dispel myth that Spring MVC Test requires JUnit
...
Issue: SPR-13552
2015-10-08 17:14:08 +02:00
e0a139a0d4
Latest applicable dependency updates (Netty 4.0.32, Tomcat 8.0.27)
2015-10-07 15:58:15 +02:00
3c549ef9fa
Polishing
2015-10-07 15:51:41 +02:00
8429c4be74
Revised TransportHandlingSockJsService for defensive transport checking and consistent logging
...
Issue: SPR-13545
(cherry picked from commit 966f95b
2015-10-07 15:48:28 +02:00
be90f7ddd4
PathResourceTests defensively compares last-modified timestamps at seconds precision
...
Issue: SPR-13542
(cherry picked from commit 9cf2895
2015-10-07 15:46:46 +02:00
315a848e6e
Portlet MVC documentation consistently refers to Portlet 2.0 spec (JSR-286)
...
Issue: SPR-13513
2015-09-28 23:15:28 +02:00
1239595672
Polishing
2015-09-28 23:11:53 +02:00
4428c347a5
StompDecoder handles partial headers correctly
...
Issue: SPR-13416
2015-09-23 16:53:17 -04:00
ad167066e7
Suppress unchecked warning with JRuby 1.7.22
2015-09-23 09:45:23 +02:00
9c40adb0da
Upgrade to JRuby 1.7.22
2015-09-23 09:36:11 +02:00
1d698617f6
Upgrade to AspectJ 1.8.7
2015-09-21 23:20:16 +02:00
60d7a7f519
Polishing
2015-09-21 23:18:58 +02:00
f1acd2882c
XhrTransport implementations do not need to redeclare interface when extending from AbstractXhrTransport
...
(cherry picked from commit df0b26f
2015-09-21 23:17:40 +02:00
aa0f11788b
AbstractEmbeddedDatabaseConfigurer explicitly closes JDBC Connection on shutdown
...
Issue: SPR-13474
(cherry picked from commit b23c232
2015-09-21 23:15:44 +02:00
7202793db0
Polishing
...
(cherry picked from commit bc13cb2
2015-09-10 14:45:34 +02:00
045016ebf9
DeferredResult accessors based on volatile fields for proper visibility
...
Issue: SPR-13451
(cherry picked from commit ae0d945
2015-09-10 14:44:51 +02:00
df3c3127a5
ConcurrentMapCache.putIfAbsent properly supports nulls
...
Issue: SPR-13458
(cherry picked from commit 4dee9cb
2015-09-10 14:43:52 +02:00
2c73c5a893
Polishing
2015-09-09 13:06:03 +02:00
987d93f2ce
MessagingException provides null description (instead of empty String) to NestedRuntimeException
...
Issue: SPR-13447
(cherry picked from commit c4f5a0f
2015-09-09 12:57:32 +02:00
8bf9257fe8
Latest applicable dependency updates (Joda-Time 2.8.2, SnakeYAML 1.16)
2015-09-08 14:51:56 +02:00
38db9fa855
Polishing
...
(cherry picked from commit 667fc7e
2015-09-08 14:48:05 +02:00
af5f4e6fb4
AbstractEnvironment defensively synchronizes access to activeProfiles and defaultProfiles
...
Issue: SPR-13213
(cherry picked from commit e393c7b
2015-09-08 13:10:46 +02:00
2dcf52797c
Consistent and defensive Servlet 3.0 method calls across Spring's web abstraction
...
(in particular, also working in debug mode where method references may get resolved early, so ternary expressions are to be avoided)
2015-09-02 18:42:43 +02:00
de0f3aec53
Undo AsyncRestTemplate's catching of Throwable in 4.1.x
...
Issue: SPR-13413
Issue: SPR-12887
2015-09-02 18:36:55 +02:00
fd2252a14e
Latest applicable dependency updates (Netty 4.0.31, Rome 1.5.1)
2015-09-02 18:11:19 +02:00
3402c13803
Undo FutureAdapter's catching of Throwable in 4.1.x
...
Issue: SPR-13413
Issue: SPR-12887
2015-09-02 18:04:11 +02:00
Rossen Stoyanchev