{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":5416865,"defaultBranch":"master","name":"undertow","ownerLogin":"fl4via","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2012-08-14T18:35:09.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/403251?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1713503967.0","currentOid":""},"activityList":{"items":[{"before":"c92301d8c72c7d2ea720765aa7a71bebce1814e9","after":null,"ref":"refs/heads/2.2.x_backport-fixes","pushedAt":"2024-04-19T05:19:27.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":null,"after":"c92301d8c72c7d2ea720765aa7a71bebce1814e9","ref":"refs/heads/2.2.x_backport-fixes","pushedAt":"2024-04-19T03:11:23.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2375] Minor fixes in contributing guide: broken links, types, style fixes.\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2375] Minor fixes in contributing guide: broken links, type…"}},{"before":"0410f3c4d9b39b754a2203a29834cac51da11258","after":null,"ref":"refs/heads/UNDERTOW-2264","pushedAt":"2024-04-19T03:04:23.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":"d71bdc5bc73c5b8f862c9a2ed14e477e3b2a2f17","after":null,"ref":"refs/heads/2.2.x_backport-fixes","pushedAt":"2024-04-19T02:58:12.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":"eeed7e4ffba1e48b6877936c888dd29cf9cac82b","after":"d71bdc5bc73c5b8f862c9a2ed14e477e3b2a2f17","ref":"refs/heads/2.2.x_backport-fixes","pushedAt":"2024-04-19T00:45:32.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2347] Always specify at least http/1.1 in application_layer_protocol_negotiation ALPN extension when doing TLS","shortMessageHtmlLink":"[UNDERTOW-2347] Always specify at least http/1.1 in application_layer…"}},{"before":"5cee8d6f64edc4e028dc5542aa1cf3d7ddc1c6fa","after":"eeed7e4ffba1e48b6877936c888dd29cf9cac82b","ref":"refs/heads/2.2.x_backport-fixes","pushedAt":"2024-04-19T00:20:14.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2347] Always specify at least http/1.1 in application_layer_protocol_negotiation ALPN extension when doing TLS","shortMessageHtmlLink":"[UNDERTOW-2347] Always specify at least http/1.1 in application_layer…"}},{"before":null,"after":"5cee8d6f64edc4e028dc5542aa1cf3d7ddc1c6fa","ref":"refs/heads/2.2.x_backport-fixes","pushedAt":"2024-04-19T00:07:50.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2347] Always specify at least http/1.1 in application_layer_protocol_negotiation ALPN extension when doing TLS","shortMessageHtmlLink":"[UNDERTOW-2347] Always specify at least http/1.1 in application_layer…"}},{"before":null,"after":"0410f3c4d9b39b754a2203a29834cac51da11258","ref":"refs/heads/UNDERTOW-2264","pushedAt":"2024-04-18T22:21:44.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2264] CVE-2023-1973 Force session timeout to 2 minutes when session was created during the authentication phase. Once authentication is complete restore original (configured) session timeout.\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2264] CVE-2023-1973 Force session timeout to 2 minutes when…"}},{"before":"9d79fc932389386b391b73047c35fc9e49eb8e46","after":"3e8a596232177837f28ac5d84fdcec3edb01884e","ref":"refs/heads/UNDERTOW-2374","pushedAt":"2024-04-18T21:01:38.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to outside of the path verification loop in Http2ReceiveListener.checkRequestHeaders\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to o…"}},{"before":"5e6e87eb5eebc0af05c1a437a1abbee72e5bb2e2","after":"9d79fc932389386b391b73047c35fc9e49eb8e46","ref":"refs/heads/UNDERTOW-2374","pushedAt":"2024-04-18T20:59:33.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to outside path verification loop the loop in Http2ReceiveListener.checkRequestHeaders\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to o…"}},{"before":null,"after":"5e6e87eb5eebc0af05c1a437a1abbee72e5bb2e2","ref":"refs/heads/UNDERTOW-2374","pushedAt":"2024-04-18T20:50:44.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to outside path verification loop the loop in Http2ReceiveListener.checkRequestHeaders\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to o…"}},{"before":null,"after":"883c118dafac27b30ab8352be93c3787162c1f7d","ref":"refs/heads/UNDERTOW-2312-codereview","pushedAt":"2024-04-18T20:29:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2312] Add test for access log with unescaped characters. Also: make the test pass on the modes for HTTP2 upgrade and AJP\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2312] Add test for access log with unescaped characters. Al…"}},{"before":"e824766df3b9d9614eff7700159e3aac5a35a1b8","after":null,"ref":"refs/heads/2.2.x_backport_bug_fixes","pushedAt":"2024-03-02T09:46:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":null,"after":"e824766df3b9d9614eff7700159e3aac5a35a1b8","ref":"refs/heads/2.2.x_backport_bug_fixes","pushedAt":"2024-02-21T13:40:57.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2336] CVE-2024-1635 At WriteTimeoutStreamSinkConduit, add a close listener to guarantee that handle is removed if necessary. Also, synchronize when creating/removing the handle.\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2336] <a title=\"CVE-2024-1635\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-w6qf-42m7-vh68/hovercard\" href=\"https://github.com/advisories/GHSA-w6qf-42m7-vh68\">CVE-2024-1635</a> At WriteTimeoutStreamSinkConduit, add a…"}},{"before":"9b7c5037eb3eff021366233a0af6b82ec83c7d94","after":null,"ref":"refs/heads/UNDERTOW-2339","pushedAt":"2024-02-21T05:48:31.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":"e3bcd5b4790bb5db9f360834923d55e3b0822910","after":null,"ref":"refs/heads/UNDERTOW-2336","pushedAt":"2024-02-21T05:48:08.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":null,"after":"e3bcd5b4790bb5db9f360834923d55e3b0822910","ref":"refs/heads/UNDERTOW-2336","pushedAt":"2024-02-21T03:36:29.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2336] CVE-2024-1635 At WriteTimeoutStreamSinkConduit, add a close listener to guarantee that handle is removed if necessary. Also, synchronize when creating/removing the handle.\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2336] <a title=\"CVE-2024-1635\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-w6qf-42m7-vh68/hovercard\" href=\"https://github.com/advisories/GHSA-w6qf-42m7-vh68\">CVE-2024-1635</a> At WriteTimeoutStreamSinkConduit, add a…"}},{"before":null,"after":"9b7c5037eb3eff021366233a0af6b82ec83c7d94","ref":"refs/heads/UNDERTOW-2339","pushedAt":"2024-02-21T03:31:45.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2339] CVE-2024-1459 Path segment \"/..;\" should not be treated as \"/..\"\n\nProxies such as httpd proxy do not resolve the path segment \"/..;/\" to\nbe a double dot segment, so they would pass such request path unchanged\nto target server. Undertow on the other hand resolves \"/..;/\" as double\ndot, which can cause essentially a path traversal problem, where client\ncan request resources that should not be available to him per proxy\nconfiguration.\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2339] <a title=\"CVE-2024-1459\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-v76w-3ph8-vm66/hovercard\" href=\"https://github.com/advisories/GHSA-v76w-3ph8-vm66\">CVE-2024-1459</a> Path segment \"/..;\" should not be treat…"}},{"before":"f8e079686e4e92c7358efd4b6127943286981f9b","after":"b0732610112cb2066b5e43a47a11008edfacee02","ref":"refs/heads/UNDERTOW-2280","pushedAt":"2024-02-21T03:23:32.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2280] CVE-2023-5379 At AjpReadListener, do not close the connection if read is larger than maxRequestSize\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2280] <a title=\"CVE-2023-5379\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-q462-4hrv-w27r/hovercard\" href=\"https://github.com/advisories/GHSA-q462-4hrv-w27r\">CVE-2023-5379</a> At AjpReadListener, do not close the co…"}},{"before":null,"after":"f8e079686e4e92c7358efd4b6127943286981f9b","ref":"refs/heads/UNDERTOW-2280","pushedAt":"2024-02-21T03:12:39.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2280] CVE-2023-5379 At AjpReadListener, do not close the connection if read is larger than maxRequestSize\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2280] <a title=\"CVE-2023-5379\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-q462-4hrv-w27r/hovercard\" href=\"https://github.com/advisories/GHSA-q462-4hrv-w27r\">CVE-2023-5379</a> At AjpReadListener, do not close the co…"}},{"before":"34724c42e45223f781a1e8f3a8c9207ed6191bcb","after":null,"ref":"refs/heads/2.2.x_backport_bug_fixes","pushedAt":"2024-02-14T13:11:14.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":null,"after":"34724c42e45223f781a1e8f3a8c9207ed6191bcb","ref":"refs/heads/2.2.x_backport_bug_fixes","pushedAt":"2024-02-14T10:45:26.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2338] Fix NPE by making sure asyncStart is true only if asyncContext is initialized\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2338] Fix NPE by making sure asyncStart is true only if asy…"}},{"before":null,"after":"c81583ac096f9d0cae024e0282ba2c1362c9643c","ref":"refs/heads/UNDERTOW-2338","pushedAt":"2024-02-13T10:01:08.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2338] Fix NPE by making sure asyncStart is true only if asyncContext is initialized\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2338] Fix NPE by making sure asyncStart is true only if asy…"}},{"before":"7aa10abee93fa6a3569a9b349ca138a19b9435c1","after":null,"ref":"refs/heads/UNDERTOW-2304","pushedAt":"2024-02-13T08:26:19.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":"23a6a6dc70e8acc94c9326079880cd9bf00ad033","after":"7aa10abee93fa6a3569a9b349ca138a19b9435c1","ref":"refs/heads/UNDERTOW-2304","pushedAt":"2024-02-13T07:43:41.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2304] At SslConduit, only delegate handshake task if the task is going to run on a different set of threads than current thread\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2304] At SslConduit, only delegate handshake task if the ta…"}},{"before":"1f93a979d2ac264798e5779b5b7172dfafe0066f","after":null,"ref":"refs/heads/UNDERTOW-2342","pushedAt":"2024-02-12T15:27:45.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"}},{"before":"b6fa1164363b0b5b32028180acd26dc77fece6f5","after":"1f93a979d2ac264798e5779b5b7172dfafe0066f","ref":"refs/heads/UNDERTOW-2342","pushedAt":"2024-02-12T14:46:52.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2342] CVE-2023-4639 ignore cookie with improper quotes\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2342] CVE-2023-4639 ignore cookie with improper quotes"}},{"before":"d398f2c20d64716d506efdf03ea2267eec2adaac","after":"050f2eceff1659026f84e2d2b57ac3ed317e31ae","ref":"refs/heads/UNDERTOW-2344","pushedAt":"2024-02-12T04:58:13.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2344] Take into account that close could run concurrently with a read operation\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2344] Take into account that close could run concurrently w…"}},{"before":null,"after":"d398f2c20d64716d506efdf03ea2267eec2adaac","ref":"refs/heads/UNDERTOW-2344","pushedAt":"2024-02-12T04:57:06.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2344] Take into account that close could run concurrently with a read operation\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2344] Take into account that close could run concurrently w…"}},{"before":null,"after":"b6fa1164363b0b5b32028180acd26dc77fece6f5","ref":"refs/heads/UNDERTOW-2342","pushedAt":"2024-02-09T07:29:03.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"fl4via","name":"Flavia Rainone","path":"/fl4via","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/403251?s=80&v=4"},"commit":{"message":"[UNDERTOW-2342] CVE-2023-4639 ignore cookie with impropper quotes\n\nSigned-off-by: Flavia Rainone <frainone@redhat.com>","shortMessageHtmlLink":"[UNDERTOW-2342] CVE-2023-4639 ignore cookie with impropper quotes"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAENM5n1gA","startCursor":null,"endCursor":null}},"title":"Activity · fl4via/undertow"}