acl
|
1b32babbf9
SEC-1545: Removed unused i18n keys, changed keys to follow naming conventions, found missing keys based upon old keys, sorted keys, any unknown keys are entered as a comment with the English value.
|
hace 14 años |
aspects
|
21ed5feb8d
SEC-1600: Added Implementation-Version and Implementation-Title to manifest templates and checking of version numbers in namespace config module and core. Config checks the version of core it is running against and core checks the Spring version, reporting any mismatches or situations where the app is running with less than the recommended Spring version.
|
hace 15 años |
buildSrc
|
49242729e4
Added imgSrcPath parameter for use in docbookFopPdf task.
|
hace 15 años |
cas
|
3f7f87e19f
SEC-1592: Updated CasAuthenticationFilter so that it does not continue FilterChain when handling proxy requests.
|
hace 14 años |
config
|
866615ceaa
SEC-1662: Cater for the case where a user uses two <http> elements without patterns and the RequestMatcher does not have two arguments.
|
hace 14 años |
core
|
eb9482b33b
Removal of some unused internal methods, plus additional tests for some areas lacking coverage.
|
hace 14 años |
crypto
|
8c08eeb57b
SEC-1666: Use constant time comparison for sensitive data.
|
hace 14 años |
docs
|
5f58108717
Typo.
|
hace 14 años |
gradle
|
5caa41753a
Add check for coverage data before trying to produce report.
|
hace 14 años |
itest
|
c1f2fa1983
SEC-1558: Changed signatures of PrePostInvocationAttributeFactory to take strings rather than annotation types to allow the metadata to be obtained from other sources (not just annotations).
|
hace 15 años |
ldap
|
eb9482b33b
Removal of some unused internal methods, plus additional tests for some areas lacking coverage.
|
hace 14 años |
openid
|
43be9ea2a4
SEC-1430: Removed caching of username in session upon failed authentication. Improved Javadoc.
|
hace 15 años |
samples
|
d58dd79a52
SEC-1494: Updated the tutorial webapp to use CSS and make use of the securityHiddenUI element when UI security is disabled.
|
hace 14 años |
sandbox
|
43be9ea2a4
SEC-1430: Removed caching of username in session upon failed authentication. Improved Javadoc.
|
hace 15 años |
taglibs
|
00200cecbc
SEC-1494: Added system property "spring.security.disableUISecurity" which will prevent authorize tags from hiding content. By default, the property will also cause the area that would normally be hidden to be decorated with a <span class="securityHiddenUI"> tag, thus allowing the area to be rendered with some distinguishing css (e.g. a different background colour).
|
hace 14 años |
web
|
eb9482b33b
Removal of some unused internal methods, plus additional tests for some areas lacking coverage.
|
hace 14 años |
.gitignore
|
7d97adc687
SEC-1584: Addition of HttpFirewall strategy to FilterChainProxy to reject un-normalized requests and wrap the incoming request object before processing by the security filter chain to provide a more consistent representation of paths than is guaranteed by the servlet spec. The wrapper strips path parameters from pathInfo and servletPath to provide consistency of URL matching across servlet containers and protect against bypassing security constraints by the malicious addition of such parameters to the URL. The paths are canonicalized further by replacing of multiple sequences of "/" characters with a single "/".
|
hace 15 años |
build.gradle
|
39b48c6d95
Update gradle wrapper to 0.9.1 in order to use mavenLocal() repo syntax.
|
hace 14 años |
class_mapping_from_2.0.x.txt
|
48dcc211e9
SEC-1148: Simple classname mapping from 2.0 to 3.0
|
hace 16 años |
gradlew
|
f1fe3ce7e6
Update wrapper to gradle 0.9 release
|
hace 15 años |
gradlew.bat
|
c9b0bc1bd9
Added gradle wrapper support.
|
hace 15 años |
license.txt
|
c3507b26c9
Change to Apache License version 2.0.
|
hace 21 años |
notice.txt
|
9cf146ecf1
Broaden list of names used and correct URL.
|
hace 18 años |
readme.txt
|
2c219f7a66
Bringing readme file up to date.
|
hace 15 años |
settings.gradle
|
ffa7301e7f
SEC-1569: initial commit of spring-security-crypto module, consisting of encrypt, keygen, password, and util packages
|
hace 14 años |