Rob Winch
|
c4bcce1ac3
Next development version
|
13 years ago |
Rob Winch
|
23bdc7d766
Release 2.0.8.RELEASE
|
13 years ago |
Rob Winch
|
d07d97838a
Update for javadoc execute with package
|
13 years ago |
Rob Winch
|
f5fc94e1be
SEC-2056: DaoAuthenticationProvider performs isPasswordValid when user not found
|
13 years ago |
Rob Winch
|
a4f13a9ae0
Added SCM information to pom for OSS requirements
|
13 years ago |
Rob Winch
|
5c308c0215
Further maven 3 cleanup
|
13 years ago |
Rob Winch
|
a0f91b2dd2
Update maven-resources-plugin to 2.6 to work with m2e
|
13 years ago |
Rob Winch
|
6cf44b9de0
Update maven-dependency-plugin to 2.5.1 to support m2e
|
13 years ago |
Luke Taylor
|
55e501711d
Set version to 2.0.8.CI-SNAPSHOT
|
14 years ago |
Luke Taylor
|
d5e6f0b575
Set release version to 2.0.7.RELEASE
|
14 years ago |
Luke Taylor
|
76dc21469e
SEC-1750: Make sure RunAs replacement is constrained to the SecurityContext of the current thread.
|
14 years ago |
Luke Taylor
|
22b7c9b905
SEC-1742: Make extraInformation in AuthenticationException transient.
|
14 years ago |
Luke Taylor
|
0cdf202b10
SEC-1744: Do not trust authorities contained in the authentication request in JaasAuthenticationProvider.
|
14 years ago |
Luke Taylor
|
a507e3612a
SEC-1741: Modify ContextPropagatingRemoteInvocation to pass a simple combination of principal/credentials as Strings, rather than serializing the whole SecurityContext object from the client.
|
14 years ago |
Luke Taylor
|
f5fbda42e5
SEC-1790: Reject redirect locations containing CR or LF.
|
14 years ago |
Rob Winch
|
d5b72275e5
SEC-1639: FirewalledRequest is now called on the specific FirewalledRequest instance rather that looping through ServletRequestWrappers.
|
14 years ago |
Luke Taylor
|
08a933f930
SEC-1608: Ensure request wrapper is reset for empty filter chains.
|
14 years ago |
Rob Winch
|
54ffc98bb4
SEC-1606: Added a FirewalledRequestAwareRequestDispatcher that will call FirewalledRequest.reset() before a forward
|
15 years ago |
Luke Taylor
|
1c3d530b60
Switch versions to 2.0.7.CI-SNAPSHOT
|
15 years ago |
Luke Taylor
|
beb0ec4ba9
Version 2.0.6.RELEASE
|
15 years ago |
Luke Taylor
|
dec2e59fba
SEC-1584: Backport of namespace support for injecting custom HttpFirewall instance into FilterChainProxy.
|
15 years ago |
Luke Taylor
|
ed7f589998
SEC-1584: Additional integration tests.
|
15 years ago |
Luke Taylor
|
8f6ddb0f17
SEC-1584: Backport to 2.0.x branch of request firewalling (normalization checks and path-parameter stripping from servletPath and pathInfo).
|
15 years ago |
Luke Taylor
|
62a8aca853
.gitignore updates
|
15 years ago |
Luke Taylor
|
9c6a5135a3
SEC-1532: Patch applied to 2.0.x branch
|
15 years ago |
Luke Taylor
|
0acf262546
SEC-1462: Added suggested patch (effectively the same as changes in 3.0.x and master branches).
|
15 years ago |
Luke Taylor
|
6ad652ae97
Update 2.0 branch pom versions.
|
15 years ago |
Luke Taylor
|
068b3d48ec
Add .gitignore to 2.0.x branch
|
15 years ago |
Luke Taylor
|
d6f6a54455
SEC-1444: Backport of changes to 2.0.x
|
15 years ago |
Luke Taylor
|
4361211c21
Change release from milestone to release
|
16 years ago |