12.0.2
joakime
released this
10 Oct 05:25
·
353 commits
to jetty-10.0.x
since this release
Security Updates
This release addresses:
- CVE-2023-44487 - (in case github/advisory-database#2869 isn't fixed, use top level link https://nvd.nist.gov/vuln/detail/CVE-2023-44487)
Changelog
- #10679 - Review HTTP/2 rate control
- #10672 - Changed default implementation of Session.Listener.onNewStream() and …
- #10618 - Reduced mildly expensive HttpMethod.is calls by reordering boolean logic
- #10613 - Fix incorrect call to super in BufferedResponseHandler
- #10563 - An omnibus PR for changes needed to support webfunctions
- #10558 - NPE when forwarding a request to default servlet which should redirect to a subdirectory with trailing slash
- #10553 - Reintroduce an Exception type for invalid UTF-8
- #10547 - Cannot customize Executor on WebSocketClient
- #10542 - Added WebSocket migration documentation, pointing to existing WebSock…
- #10526 - do not run this in parallel as some conflicted jdni entries with ServerWithJNDITest
- #10513 - Lockup processing POST request body with Jetty 12.0.1 using http/2
- #10508 - Jetty 12 IllegalArgumentExeption when setting a HTTP header to null
- #10502 - Introduced CompletableResponseListener
- #10500 - Jetty 12 HTTP SPI does not preserve double-quotes on valid request headers
- #10498 - NullPointerException from call to UpgradeRequest#getUserPrincipal with Jetty 12
- #10483 - Improve BufferedResponseHandler
- #10482 - RewriteHandler with multiple HeaderPatternRules
- #10479 - Fix parsing of JSESSIONID only
- #10474 - Jetty 12 default error handler throws IllegalStateException for application/json
- #10473 - Startup Script reports
ok
too fast, and doesn't wait for actual start of Jetty - #10466 - Review HTTP session documentation
- #10463 - Jetty 12 throws Exception handling static files when using response wrapper
- #10442 - Reduce verbosity when JMX finds overloaded setter
- #10441 - Jetty 12 ee8 jaspi is missing
- #10440 - ClassCastException with
<jettyEnvXml>
use injetty-ee10-maven-plugin
- #10361 - Introduce QoSHandler
- #10328 - Review
ResourceFactory.newSystemResource(String)
behavior & javadoc - #10324 - Improve migration from Servlets to Handler
- #10219 - Review HTTP Cookie parsing
- #9665 -
HttpCookieStore
incorrectly rejects cookies for domains that are an IPv6 address