issues  

Messages by Thread

• [jira] [Resolved] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9243) AuthorizationCodeGrantHandler consumes (burns) authorization code before performing validation (PKCE/redirect_uri), causing availability DoS on legitimate retries Guanping Zhang (Jira)
• [jira] [Created] (CXF-9242) JwtAccessTokenValidator accepts absent `typ` header; OIDC IdP issues id_tokens without `typ`, enabling token confusion in misconfigured RS Guanping Zhang (Jira)
• [jira] [Assigned] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Freeman Yue Fang (Jira)
• [jira] [Assigned] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Andriy Redko (Jira)
• [jira] [Created] (CXF-9241) ImplicitConfidentialGrantService violates RFC 6749 §4.2.2 by issuing Refresh Tokens in the Implicit Flow Guanping Zhang (Jira)
• [jira] [Commented] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted Colm O hEigeartaigh (Jira)
  • [jira] [Updated] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted Colm O hEigeartaigh (Jira)
  • [jira] [Assigned] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted Colm O hEigeartaigh (Jira)
• [jira] [Resolved] (CXF-9239) JoseSessionTokenProvider accepts JWE-only (no JWS) session tokens — enforce encrypt-then-sign or warn/document the integrity gap Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9239) JoseSessionTokenProvider accepts JWE-only (no JWS) session tokens — enforce encrypt-then-sign or warn/document the integrity gap Colm O hEigeartaigh (Jira)
• [jira] [Resolved] (CXF-9240) OAuthJSONProvider.appendJsonPair() does not escape JSON string values — output injection / malformed JSON in introspect & token responses Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9240) OAuthJSONProvider.appendJsonPair() does not escape JSON string values — output injection / malformed JSON in introspect & token responses Colm O hEigeartaigh (Jira)
  • [jira] [Updated] (CXF-9240) OAuthJSONProvider.appendJsonPair() does not escape JSON string values — output injection / malformed JSON in introspect & token responses Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9240) OAuthJSONProvider.appendJsonPair() does not escape JSON string values — output injection / malformed JSON in introspect & token responses Colm O hEigeartaigh (Jira)
• [jira] [Created] (CXF-9238) AbstractAccessTokenValidator validation cache evicts ALL entries via clear() on overflow — replace with LRU to avoid cache-thrash Guanping Zhang (Jira)
• [jira] [Created] (CXF-9240) OAuthJSONProvider.appendJsonPair() does not escape JSON string values — output injection / malformed JSON in introspect & token responses Guanping Zhang (Jira)
• [jira] [Created] (CXF-9239) JoseSessionTokenProvider accepts JWE-only (no JWS) session tokens — enforce encrypt-then-sign or warn/document the integrity gap Guanping Zhang (Jira)
• [jira] [Updated] (CXF-9236) Hawk validator: nonce/replay protection silently disabled by default (NonceVerifier never wired) — fail closed or auto-wire Guanping Zhang (Jira)
• [jira] [Created] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted Guanping Zhang (Jira)
• [jira] [Created] (CXF-9236) Hawk validator: nonce/replay protection silently disabled by default (NonceVerifier never wired) — fail closed or auto-wire Guanping Zhang (Jira)
• [jira] [Commented] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Guanping Zhang (Jira)
  • [jira] [Commented] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Andriy Redko (Jira)
• [jira] [Comment Edited] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Freeman Yue Fang (Jira)
  • [jira] [Comment Edited] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
  • [jira] [Comment Edited] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
• [jira] [Resolved] (CXF-9234) Concurrent DynamicClientFactory.createClient for the same WSDL url corrupts the cached schema DOM and spins forever at 100% CPU Freeman Yue Fang (Jira)
• [jira] [Commented] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
  • [jira] [Commented] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Freeman Yue Fang (Jira)
  • [jira] [Commented] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
  • [jira] [Commented] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
• [jira] [Updated] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
  • [jira] [Updated] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
  • [jira] [Updated] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Neena Jacob (Jira)
  • [jira] [Updated] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request Freeman Yue Fang (Jira)
• [jira] [Updated] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request Neena Jacob (Jira)
  • [jira] [Updated] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request Neena Jacob (Jira)
  • [jira] [Updated] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request Neena Jacob (Jira)
  • [jira] [Updated] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request Neena Jacob (Jira)
• [jira] [Created] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request Neena Jacob (Jira)
• [jira] [Updated] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Updated] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Updated] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Andriy Redko (Jira)
• [jira] [Updated] (CXF-9220) Remove Apache Derby since it is retired Andriy Redko (Jira)
• [jira] [Assigned] (CXF-9234) Concurrent DynamicClientFactory.createClient for the same WSDL url corrupts the cached schema DOM and spins forever at 100% CPU Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9234) Concurrent DynamicClientFactory.createClient for the same WSDL url corrupts the cached schema DOM and spins forever at 100% CPU David Richter (Jira)
• [jira] [Comment Edited] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Comment Edited] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Comment Edited] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Comment Edited] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
• [jira] [Commented] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Commented] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Commented] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Commented] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
  • [jira] [Commented] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
• [jira] [Created] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :( Valentino Porta (Jira)
• [jira] [Resolved] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access Colm O hEigeartaigh (Jira)
• [jira] [Commented] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access Colm O hEigeartaigh (Jira)
  • [jira] [Updated] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access Colm O hEigeartaigh (Jira)
• [jira] [Resolved] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows Colm O hEigeartaigh (Jira)
  • [jira] [Updated] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows Colm O hEigeartaigh (Jira)
• [jira] [Resolved] (CXF-8780) 3.5.4 Version - org.apache.cxf.common.util.ReflectionUtil.getDeclaredMethod no such method error Colm O hEigeartaigh (Jira)
• [jira] [Reopened] (CXF-8998) cxf-codegen-plugin - debug output velocity Karl Heinz Marbaise (Jira)
• [jira] [Created] (CXF-9232) Implement JTI/Assertion-ID replay cache for SAML and JWT bearer grants (Close //TODO) Guanping Zhang (Jira)
• [jira] [Commented] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg Freeman Yue Fang (Jira)
• [jira] [Assigned] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
• [jira] [Updated] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
• [jira] [Comment Edited] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
  • [jira] [Comment Edited] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9230) Update to Spring Boot 4.1 release line Andriy Redko (Jira)
• [jira] [Created] (CXF-9230) Update to Spring Boot 4.1 release line Andriy Redko (Jira)
• [jira] [Commented] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
  • [jira] [Commented] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9228) Post-Quantum Cryptography (PQC) Readiness Freeman Yue Fang (Jira)
• [jira] [Assigned] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM). Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9161) Some of the OIDCFlowTest fail with timeout (JPA only) when HttpClient instance is shared Andriy Redko (Jira)
• [jira] [Resolved] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Freeman Yue Fang (Jira)
• [jira] [Commented] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Fabio Burzigotti (Jira)
  • [jira] [Commented] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Freeman Yue Fang (Jira)
  • [jira] [Commented] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Fabio Burzigotti (Jira)
• [jira] [Resolved] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Freeman Yue Fang (Jira)
  • [jira] [Updated] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Colm O hEigeartaigh (Jira)
• [jira] [Created] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Freeman Yue Fang (Jira)
• [jira] [Assigned] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements Freeman Yue Fang (Jira)
• [jira] [Commented] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) Colm O hEigeartaigh (Jira)
• [jira] [Commented] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Freeman Yue Fang (Jira)
  • [jira] [Commented] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Reto Weiss (Jira)
• [jira] [Assigned] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Freeman Yue Fang (Jira)
• [jira] [Updated] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Reto Weiss (Jira)
  • [jira] [Updated] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Freeman Yue Fang (Jira)
  • [jira] [Updated] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) Reto Weiss (Jira)
• [jira] [Resolved] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Andriy Redko (Jira)
• [jira] [Assigned] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks Colm O hEigeartaigh (Jira)
  • [jira] [Assigned] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks Colm O hEigeartaigh (Jira)
  • [jira] [Assigned] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks Colm O hEigeartaigh (Jira)
  • [jira] [Assigned] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Andriy Redko (Jira)
• [jira] [Created] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows Guanping Zhang (Jira)
• [jira] [Created] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks Guanping Zhang (Jira)
• [jira] [Created] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access Guanping Zhang (Jira)
• [jira] [Created] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) Guanping Zhang (Jira)
• [jira] [Updated] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Guanping Zhang (Jira)
  • [jira] [Updated] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Andriy Redko (Jira)
  • [jira] [Updated] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Andriy Redko (Jira)
  • [jira] [Updated] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Andriy Redko (Jira)
• [jira] [Created] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted Guanping Zhang (Jira)
• [jira] [Created] (CXF-9220) Remove Apache Derby since it is retired Andriy Redko (Jira)
• [jira] [Resolved] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published Andriy Redko (Jira)
• [jira] [Assigned] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published Andriy Redko (Jira)
• [jira] [Updated] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published Andriy Redko (Jira)
• [jira] [Created] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published James Hutton (Jira)
• [jira] [Updated] (CXF-8926) MTOM - Lock while processing attachment Freeman Yue Fang (Jira)
  • [jira] [Updated] (CXF-8926) MTOM - Lock while processing attachment mircea (Jira)
  • [jira] [Updated] (CXF-8926) MTOM - Lock while processing attachment mircea (Jira)
• [jira] [Assigned] (CXF-8926) MTOM - Lock while processing attachment Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9213) RetryStrategy is a stateful class whose objects shouldn't be reused Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-9129) Chunked attachment streaming not working when using ws-security Freeman Yue Fang (Jira)
• [jira] [Assigned] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties Freeman Yue Fang (Jira)
• [jira] [Commented] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties Freeman Yue Fang (Jira)
  • [jira] [Commented] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties Matthias Pretzer (Jira)
• [jira] [Created] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties Matthias Pretzer (Jira)
• [jira] [Assigned] (CXF-9129) Chunked attachment streaming not working when using ws-security Freeman Yue Fang (Jira)
• [jira] [Closed] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Markus Jung (Jira)
• [jira] [Comment Edited] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Andriy Redko (Jira)
• [jira] [Commented] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Andriy Redko (Jira)
  • [jira] [Commented] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Markus Jung (Jira)
  • [jira] [Commented] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Markus Jung (Jira)
  • [jira] [Commented] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Andriy Redko (Jira)
• [jira] [Created] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template Markus Jung (Jira)
• [jira] [Resolved] (CXF-9216) Switch default OAuth2 code verifier to Digest Colm O hEigeartaigh (Jira)
• [jira] [Created] (CXF-9216) Switch default OAuth2 code verifier to Digest Colm O hEigeartaigh (Jira)
• [jira] [Created] (CXF-9215) Enforce PKCE by default Colm O hEigeartaigh (Jira)
• [jira] [Resolved] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM Colm O hEigeartaigh (Jira)
• [jira] [Updated] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM Colm O hEigeartaigh (Jira)
• [jira] [Assigned] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM Colm O hEigeartaigh (Jira)
• [jira] [Created] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM Peter Palaga (Jira)
• [jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose objects shouldn't be reused Sammy Chan (Jira)
  • [jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose objects shouldn't be reused Freeman Yue Fang (Jira)
• [jira] [Assigned] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared Freeman Yue Fang (Jira)
• [jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared Sammy Chan (Jira)
  • [jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared Sammy Chan (Jira)
  • [jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared Sammy Chan (Jira)
  • [jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared Sammy Chan (Jira)
• [jira] [Created] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared Sammy Chan (Jira)
• [jira] [Updated] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver Andriy Redko (Jira)
  • [jira] [Updated] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver Colm O hEigeartaigh (Jira)
• [jira] [Commented] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver Fabio Burzigotti (Jira)
  • [jira] [Commented] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver Fabio Burzigotti (Jira)
• [jira] [Resolved] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver Andriy Redko (Jira)
• [jira] [Created] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver Andriy Redko (Jira)
• [jira] [Resolved] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics Andriy Redko (Jira)
• [jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics der-brecher (Jira)
  • [jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics der-brecher (Jira)
  • [jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics der-brecher (Jira)
  • [jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics der-brecher (Jira)
  • [jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics der-brecher (Jira)
  • [jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics Andriy Redko (Jira)
• [jira] [Created] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics der-brecher (Jira)
• [jira] [Resolved] (CXF-9147) WSDL to Java: Missing namespace since 4.1.* Freeman Yue Fang (Jira)
• [jira] [Commented] (CXF-9147) WSDL to Java: Missing namespace since 4.1.* Manuel K (Jira)
  • [jira] [Commented] (CXF-9147) WSDL to Java: Missing namespace since 4.1.* Freeman Yue Fang (Jira)
  • [jira] [Commented] (CXF-9147) WSDL to Java: Missing namespace since 4.1.* Manuel K (Jira)
• [jira] [Resolved] (CXF-9008) FIPS support Freeman Yue Fang (Jira)
• [jira] [Updated] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Andriy Redko (Jira)
  • [jira] [Updated] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Corey Bodendein (Jira)
  • [jira] [Updated] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Corey Bodendein (Jira)
• [jira] [Resolved] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs Andriy Redko (Jira)
• [jira] [Resolved] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Andriy Redko (Jira)
• [jira] [Commented] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Corey Bodendein (Jira)
  • [jira] [Commented] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Corey Bodendein (Jira)
  • [jira] [Commented] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Andriy Redko (Jira)
  • [jira] [Commented] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Corey Bodendein (Jira)
• [jira] [Assigned] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Freeman Yue Fang (Jira)
• [jira] [Created] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header Corey Bodendein (Jira)
• [jira] [Resolved] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables Andriy Redko (Jira)
• [jira] [Resolved] (CXF-9206) Duplicated value of 'cxf.server.requests' metric for JAX RS Server Freeman Yue Fang (Jira)
• [jira] [Resolved] (CXF-8748) nonProxyHosts is case sensitive Andriy Redko (Jira)
• [jira] [Updated] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables Markus Jung (Jira)
  • [jira] [Updated] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables Andriy Redko (Jira)
  • [jira] [Updated] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables Andriy Redko (Jira)
  • [jira] [Updated] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables Andriy Redko (Jira)
• [jira] [Created] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for templated Paths Markus Jung (Jira)
• [jira] [Resolved] (CXF-8393) Umbrella issue to address fixing flaky tests Andriy Redko (Jira)
• [jira] [Closed] (CXF-8805) Fix org.apache.cxf.transport.jms.RequestResponseTest.testRequestTopicResponseTempQueue Andriy Redko (Jira)
• [jira] [Closed] (CXF-8444) Fix org.apache.cxf.systest.ws.rm.DeliveryAssuranceOnewayTest.testExactlyOnceInOrder Andriy Redko (Jira)

• Earlier messages