github/spring-security @ 7d97adc68789f4a191cee15de482530dd9d5c31d

Luke Taylor 7d97adc687 SEC-1584: Addition of HttpFirewall strategy to FilterChainProxy to reject un-normalized requests and wrap the incoming request object before processing by the security filter chain to provide a more consistent representation of paths than is guaranteed by the servlet spec. The wrapper strips path parameters from pathInfo and servletPath to provide consistency of URL matching across servlet containers and protect against bypassing security constraints by the malicious addition of such parameters to the URL. The paths are canonicalized further by replacing of multiple sequences of "/" characters with a single "/".		15 lat temu
..
src	7d97adc687 SEC-1584: Addition of HttpFirewall strategy to FilterChainProxy to reject un-normalized requests and wrap the incoming request object before processing by the security filter chain to provide a more consistent representation of paths than is guaranteed by the servlet spec. The wrapper strips path parameters from pathInfo and servletPath to provide consistency of URL matching across servlet containers and protect against bypassing security constraints by the malicious addition of such parameters to the URL. The paths are canonicalized further by replacing of multiple sequences of "/" characters with a single "/".	15 lat temu
config.gradle	7dd8cd2fb9 Make sure ApacheDS work directory is set correctly for separate LDAP test task in config module.	15 lat temu
convert_schema.sh	b7fc5bc455 Update schema version to 3.1	15 lat temu
template.mf	a4ce14f604 Add "provisioning" package to config bundlor template.	15 lat temu