暂无描述

Rob Winch 79e17e22bc SEC-1703: Updated namespace for intercept-url 14 年之前
acl ccc548b9e4 Fixing bundlor warnings. 14 年之前
aspects ccc548b9e4 Fixing bundlor warnings. 14 年之前
buildSrc bb3b8e4683 Update AspectJPlugin to configure EclipseProject and EclipseClasspath tasks 14 年之前
cas b0df1bd1b0 SEC-1673: Use a map to store the range values use in the bundlor templates. 14 年之前
config ccc548b9e4 Fixing bundlor warnings. 14 年之前
core e470eaa41d SEC-1689: Moved core codec code into crypto package and removed existing duplication (Hex encoding etc). Refactoring of crypto code to use CharSequence for where possible instead of String. 14 年之前
docs 79e17e22bc SEC-1703: Updated namespace for intercept-url 14 年之前
gradle 315c225bcb Removed unused aspectj gradle file 14 年之前
itest 94b7868039 SEC-1675: Add missing body-content elements to tag descriptor and update it to use 2.0 tag library schema. 14 年之前
ldap 44fb3aa4ab SEC-1677: Create integrationTest task for Java projects and make all tests in itest module run as integration tests only. 14 年之前
openid 4a1908188a SEC-1701: Trim claimed identity parameter value before submitting to OpenID4Java. 14 年之前
samples a50c9afbab Modified jaas sample's LoginModule to prevent empty string username/password 14 年之前
sandbox 43be9ea2a4 SEC-1430: Removed caching of username in session upon failed authentication. Improved Javadoc. 15 年之前
taglibs ccc548b9e4 Fixing bundlor warnings. 14 年之前
web 78d5495945 SEC-1702: Add Burt's patch implementing hashcode method in AntPathRequestMatcher 14 年之前
.gitignore 7d97adc687 SEC-1584: Addition of HttpFirewall strategy to FilterChainProxy to reject un-normalized requests and wrap the incoming request object before processing by the security filter chain to provide a more consistent representation of paths than is guaranteed by the servlet spec. The wrapper strips path parameters from pathInfo and servletPath to provide consistency of URL matching across servlet containers and protect against bypassing security constraints by the malicious addition of such parameters to the URL. The paths are canonicalized further by replacing of multiple sequences of "/" characters with a single "/". 15 年之前
build.gradle 9c09f0b73d Remove unnecessary repos from main build file (EBR should only be needed for bundlor) and we generally have no need to build against snapshots other than for one-off testing. 14 年之前
class_mapping_from_2.0.x.txt 48dcc211e9 SEC-1148: Simple classname mapping from 2.0 to 3.0 16 年之前
gradlew c7de933cb9 Updated gradle wrapper to gradle-1.0-milestone-1 14 年之前
gradlew.bat c7de933cb9 Updated gradle wrapper to gradle-1.0-milestone-1 14 年之前
license.txt c3507b26c9 Change to Apache License version 2.0. 21 年之前
notice.txt 9cf146ecf1 Broaden list of names used and correct URL. 18 年之前
readme.txt 2c219f7a66 Bringing readme file up to date. 15 年之前
settings.gradle 50828cdd43 SEC-1689: Move crypto module code to core for simplicity. 14 年之前

readme.txt

===============================================================================
SPRING SECURITY - README FILE
===============================================================================

-------------------------------------------------------------------------------
OVERVIEW
-------------------------------------------------------------------------------

Spring Security provides security services for the Spring Framework
(http://www.springframework.org). Spring Security 3.1 requires Spring 3.0.3 as
a minimum and also requires Java 5.

For a detailed list of features and access to the latest release, please visit
http://www.springframework.org/projects/.

Spring Security is released under an Apache 2.0 license. See the accompanying
license.txt file.

-------------------------------------------------------------------------------
BUILDING
-------------------------------------------------------------------------------

Please read the "Building from Source" page at
http://static.springframework.org/spring-security/site/.

-------------------------------------------------------------------------------
DOCUMENTATION
-------------------------------------------------------------------------------

Be sure to read the Reference Guide (docs/reference/html/springsecurity.html).
Extensive JavaDoc for the Spring Security code is also available (in docs/apidocs).
Both can also be found on the website.

-------------------------------------------------------------------------------
QUICK START
-------------------------------------------------------------------------------

We recommend you visit http://static.springframework.org/spring-security/site and
read the "Getting Started" page.

-------------------------------------------------------------------------------
MAVEN REPOSITORY DOWNLOADS
-------------------------------------------------------------------------------

Release jars for the project are available from the central maven repository

http://repo1.maven.org/maven2/org/springframework/security/

Note that milestone releases and snapshots are not uploaded to the central
repository, but can be obtained from the Spring milestone repository, using the
maven repository http://maven.springframework.org/snapshot/. You can't browse this
URL directly, but there is a separate browser interface. Check the downloads page
for more information
http://static.springsource.org/spring-security/site/downloads.html


-------------------------------------------------------------------------------
OBTAINING SUPPORT
-------------------------------------------------------------------------------

There are two types of support available, commercial and community. For
commercial support, please contact SpringSource. SpringSource employ the
people who wrote Spring Security, and lead the development of the project:

http://www.springsource.com

For peer help and assistance, please use the Spring Security forum
located at the Spring Community's forum site:

http://forum.springframework.org

Links to the forums, and other useful resources are
available from the web site.