Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
IMPORTEND: Is not finished because that contains a braking change, like
javax.servlet.* --> jakarta.servket.*
as one example and we miss some third-party libs that use the new API.
# Conflicts:
# eaaf_core_api/checks/spotbugs-exclude.xml
# eaaf_core_api/pom.xml
# eaaf_core_utils/checks/spotbugs-exclude.xml
# pom.xml
|
|
This version requires Java 17 as minimum
# Conflicts:
# build_reporting/pom.xml
# eaaf-springboot-utils/pom.xml
# eaaf_core/pom.xml
# eaaf_core_api/pom.xml
# eaaf_core_utils/pom.xml
# eaaf_modules/eaaf_module_auth_sl20/pom.xml
# eaaf_modules/eaaf_module_moa-sig/pom.xml
# eaaf_modules/eaaf_module_pvp2_core/pom.xml
# eaaf_modules/eaaf_module_pvp2_idp/pom.xml
# eaaf_modules/eaaf_module_pvp2_sp/pom.xml
# eaaf_modules/pom.xml
# pom.xml
|
|
|
|
|
|
|
|
multi-module projects
|
|
Based on spring-boot-auto-configuration 2.7.3
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
validation on REST API's
|
|
|
|
|
|
|
|
|
|
|
|
|
|
setDisallowedFields
|
|
|
|
|
|
disallowed files for DataBinder
This code protects Spring Core from a "Remote Code Execution" attack (dubbed "Spring4Shell").This is a midigation for
For more details, see this post: https://www.lunasec.io/docs/blog/spring-rce-vulnerabilities/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|