codeconsole opened a new pull request, #16792:
URL: https://github.com/apache/grails-core/pull/16792

   Follow-up to #16768, from [matrei's review of 
#16760](https://github.com/apache/grails-core/pull/16760#discussion_r4401993840),
 which applies to 8.1.x as well. Docs only.
   
   - #16768 moved `GrailsFilters.CHARACTER_ENCODING_FILTER` from -180 to 
`Ordered.HIGHEST_PRECEDENCE`. A filter ordered at 
`CHARACTER_ENCODING_FILTER.order + 1` therefore moves from -179 to 
`HIGHEST_PRECEDENCE + 1`, ahead of `FormContentFilter` (-9900) and of the 
security headers filter at `GrailsFilters.FIRST` (-200). It no longer sees the 
parameters of a PUT, PATCH or DELETE form, and a response it sends without 
continuing the chain gets no security headers. Section 5 of the 8.1 upgrade 
guide, its required actions and the `grails-8-upgrade` skill now say so, and 
that `GrailsFilters.ASSET_PIPELINE_FILTER.order + 1` keeps the place such a 
filter had in Grails 8.0.
   - The plugin guide's filter-ordering note said the Grails filters from -200 
to -150 are ten apart. Nothing is at -180, so it now says at least ten apart.
   
   #16760 makes the same changes on 9.0.x, with the same wording for the 
plugin-guide sentence, so the note that conflicts at the merge-up resolves to 
either side.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to