[
https://issues.apache.org/jira/browse/KNOX-3447?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18123254#comment-18123254
]
ASF subversion and git services commented on KNOX-3447:
-------------------------------------------------------
Commit d4b23f173cedfe444f8b1f58ae0dbbfa72cf0ec1 in knox's branch
refs/heads/v2.1.x from hanicz
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=d4b23f173 ]
Backporting improvements from 3.1.x (#1440)
* KNOX-3488: Harden original-url cookie validation (#1429)
* KNOX-3488: Harden original-url validation
* KNOX-3488: Harden redirect and logout jsp originalUrl as well
* KNOX-3488: WebSSOResourceTest for empty cookie, and valid originalUrl cookie
is removed
(cherry picked from commit 315ae7cff03182be4a5456b4d8fb50c947e4489d)
* KNOX-3447: Harden ServiceDefinitonUnmarshaller (#1387)
(cherry picked from commit b2d2843c602c5810fe2fa75542debe81a8c6a608)
* KNOX-3430: Deprecate AccessTokenFederationFilter, also added
UnsupportedOperatorException (#1370)
(cherry picked from commit 7d719ca06d1179c5ca2a22312623e91768c5b6f2)
* KNOX-3450: Add Transfer-Encoding to set of excluded headers in
PassAllHeadersDispatch (#1389)
PassAllHeadersDispatchTest.java Generated-by: Claude Code
(cherry picked from commit 0a3a7949b091dcdc3f609f1f95c1dd95d3f91b0c)
---------
Co-authored-by: Phil Zampino <[email protected]>
> Harden ServiceDefinitionUnmarshaller
> ------------------------------------
>
> Key: KNOX-3447
> URL: https://issues.apache.org/jira/browse/KNOX-3447
> Project: Apache Knox
> Issue Type: Improvement
> Components: Server
> Affects Versions: 3.1.0
> Reporter: Tamás Hanicz
> Assignee: Tamás Hanicz
> Priority: Major
> Fix For: 3.1.0
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
