-
Notifications
You must be signed in to change notification settings - Fork 38.5k
SPR-8308: OpPlus should convert operand values to String using registered converters #7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…ered converters implementation + unittest
@aclement could you take a look at this? I'll assign the JIRA issue to you as well. |
Ivo, I'm looking at merging this pull request, but need to know that you've signed the SpringSource CLA. Please follow the instructions in the contributor guidelines and let us know you've filled out the form (it's easy and just takes a couple minutes). Thanks! |
Hi Chris,
|
Thanks for the quick response! You don't need to post the generated ID here (but do keep track of it). On any future pull requests, you can just add the following line in a comment:
Note that I just updated the contributor guidelines document to make this clear. |
* SPR-8308: Convert SpEL plus operands using reg'd converters
This change has been merged, but note that several modifications were necessary:
Most of the items above are covered in the contributor guidelines. Please review it completely before future submissions. Thanks for the contribution, Ivo! |
You are welcome :-) Next time I will be more careful to satisfy contributor guidelines. |
Update navbar item "Forum" -> "Questions"
…ELEASE-TT.x-patch Backport and fixes for ETag parsing
…-match-exception (pull request spring-projects#7) CVE-2024-38820 use Locale.ROOT in DataBinder .toLowerCase instances (VULN-1469905 BBSDEV-32637) This commit does the minimum change in DataBinder.java to address the CVE (and mimics the code change from the [corresponding spring-framework fix in v6.1.14](spring-projects@23656ae#diff-1f22c41307a3ddcec8f1bc7a237d3b77ac7564883f4c663402993affac8a5756R30-R1162) for consistency with the original spring-framework) CVE-2024-38820 description: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. Approved-by: Tomasz Mrowicki
implementation + unittest