玖涯软件开发|java/go/python

Spring Security StrictHttpFirewall incorrectly rejects valid CJKV characters

Comment From: tawAsh1Almost LGTM. We also checked the behavior.I was looking at other methods like setAllowUrlEncodedPer...

Spring Security Support for delegation in token exchange according to RFC8693

Keycloak should support delegation when using token exchange according to RFC8693. In the current version of keycloak on...

Spring Security Add relyingPartyRegistrationId to AbstractSaml2AuthenticationRequest

It would be nice if implementations of AbstractSaml2AuthenticationRequest stored the relyingPartyRegistrationId.One bene...

Spring Security ACL does not work with H2 version 2 anymore

Describe the bug(https://github.com/spring-projects/spring-security/blob/main/acl/src/main/java/org/springframework/secu...

Spring Security Extract rejectNonPrintableAsciiCharactersInFieldName

We should extract rejectNonPrintableAsciiCharactersInFieldName so it can be reused.Comment From: rwinchFixed in 0df5ece7...

Spring Security Retriving RelayState in authenticating SAMLResponse step

SummaryCurrent codes doesn't seem to provide the way to get RelayState from authenticationManager, Saml2AuthenticationTo...

Spring Security Using unsafe Jackson deserialization configuration is security-sensitive

ContextCode analysis tool reported a problem about spring-security.Related Code: https://github.com/spring-projects/spri...

Spring Security Add AuthorizationManager that uses ExpressionHandler

In order to better facilitate the use of AuthorizationManager in JSP, Thymeleaf, and XML configuration support, we shoul...

Spring Security Branch 5.8.x should point to samples branch 5.8.x

The samplesBranch property should be updated to point to 5.8.x instead of 5.7.xComment From: marcusdacoregioFixed via ht...

Spring Security Multiple .requestMatchers().mvcMatchers() override previous one

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/7983c695e23027cfdb7689b...

Spring Security Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/15b3744dcfe3c4d753bc2a0...

Spring Security Check Samples should run against the current artifacts

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/44e672d9692a5f67abdea8...

Spring Security Check Samples should run against the current artifacts

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/991d5c8817468aadf4335d...

Spring Security Check Samples should run against the current artifacts

When checking the samples we are testing against the artifacts that are already deployed. Instead we should run against ...

Spring Security Build failing because of removed deprecated context-related operators

It seems to be related to: - https://github.com/spring-projects/spring-framework/commit/f3fd8f9e1d0d87f016cc87ac0859111c...

Spring Security SEC-2129: AntPathRequestMatcher support case sensitive matches

Michael Osipov (Migrated from SEC-2129) said:AntPathRequestMatcher claims to work much like AntPathMatcher but treats ev...

Spring Security Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager#isAuthorized

Currently AuthorityAuthorizationManager#isAuthorized uses an inner loop to determine if user has required authority:priv...

Spring Security StrictHttpFirewall incorrectly rejects valid CJKV characters

Spring Security Support for delegation in token exchange according to RFC8693

Spring Security Add relyingPartyRegistrationId to AbstractSaml2AuthenticationRequest

Spring Security ACL does not work with H2 version 2 anymore

Spring Security Extract rejectNonPrintableAsciiCharactersInFieldName

Spring Security Retriving RelayState in authenticating SAMLResponse step

Spring Security Using unsafe Jackson deserialization configuration is security-sensitive

Spring Security Add AuthorizationManager that uses ExpressionHandler

Spring Security Branch 5.8.x should point to samples branch 5.8.x

Spring Security Multiple .requestMatchers().mvcMatchers() override previous one

Spring Security Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator

Spring Security Check Samples should run against the current artifacts

Spring Security Check Samples should run against the current artifacts

Spring Security Check Samples should run against the current artifacts

Spring Security Build failing because of removed deprecated context-related operators

Spring Security SEC-2129: AntPathRequestMatcher support case sensitive matches

Spring Security Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager#isAuthorized

Spring Security Allow customization of restOperations for JwtDecoder built using an issuer uri

Spring Security Possible log forging

Spring Security Multiple .requestMatchers().mvcMatchers() override previous one