From 404f3fdcc46bdfc92350ff067e5688c68dab4fcc Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:11 +0000 Subject: [PATCH 01/19] Upgrade to Byte Buddy 1.12.23 Closes gh-34255 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 121793a65a..8339b6bf0b 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -87,7 +87,7 @@ bom { ] } } - library("Byte Buddy", "1.12.22") { + library("Byte Buddy", "1.12.23") { group("net.bytebuddy") { modules = [ "byte-buddy", From fcbe2f7df226c87cf4fb1697da3e3357767c4691 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:16 +0000 Subject: [PATCH 02/19] Upgrade to Caffeine 3.1.4 Closes gh-34256 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 8339b6bf0b..84a28393ab 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -107,7 +107,7 @@ bom { ] } } - library("Caffeine", "3.1.2") { + library("Caffeine", "3.1.4") { group("com.github.ben-manes.caffeine") { modules = [ "caffeine", From f67dc159e72e578ba0cbabb371ad9579893065f5 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:22 +0000 Subject: [PATCH 03/19] Upgrade to Couchbase Client 3.4.3 Closes gh-34257 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 84a28393ab..a350909b4f 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -173,7 +173,7 @@ bom { ] } } - library("Couchbase Client", "3.4.2") { + library("Couchbase Client", "3.4.3") { group("com.couchbase.client") { modules = [ "java-client" From 76f8c0533a390d43356b9effcbb2ee871051e290 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:27 +0000 Subject: [PATCH 04/19] Upgrade to Dropwizard Metrics 4.2.16 Closes gh-34258 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index a350909b4f..129e680ab4 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -206,7 +206,7 @@ bom { ] } } - library("Dropwizard Metrics", "4.2.15") { + library("Dropwizard Metrics", "4.2.16") { group("io.dropwizard.metrics") { imports = [ "metrics-bom" From c9718e7326f4012d242b2a1d51f443f6277ce588 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:34 +0000 Subject: [PATCH 05/19] Upgrade to Glassfish JAXB 4.0.2 Closes gh-34259 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 129e680ab4..a9c38a39a6 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -270,7 +270,7 @@ bom { ] } } - library("Glassfish JAXB", "4.0.1") { + library("Glassfish JAXB", "4.0.2") { group("org.glassfish.jaxb") { imports = [ "jaxb-bom" From 83b7060dcd81ecbce4c88a9c975314305d0ffddf Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:40 +0000 Subject: [PATCH 06/19] Upgrade to Groovy 4.0.9 Closes gh-34260 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index a9c38a39a6..083dec1746 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -291,7 +291,7 @@ bom { ] } } - library("Groovy", "4.0.7") { + library("Groovy", "4.0.9") { group("org.apache.groovy") { imports = [ "groovy-bom" From 96dbd09ec56cbce4f9f617e11928b53be9f4d96f Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:44 +0000 Subject: [PATCH 07/19] Upgrade to Hibernate 6.1.7.Final Closes gh-34261 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 083dec1746..d0322bb641 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -329,7 +329,7 @@ bom { ] } } - library("Hibernate", "6.1.6.Final") { + library("Hibernate", "6.1.7.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From 41edf24016ee7ac2280ab20b4a64ae777bbb1e0d Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:50 +0000 Subject: [PATCH 08/19] Upgrade to Jackson Bom 2.14.2 Closes gh-34262 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index d0322bb641..eb860402ca 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -445,7 +445,7 @@ bom { ] } } - library("Jackson Bom", "2.14.1") { + library("Jackson Bom", "2.14.2") { group("com.fasterxml.jackson") { imports = [ "jackson-bom" From dd94e2a1a1ad50659cc135f845240f851fbb50cb Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:53:55 +0000 Subject: [PATCH 09/19] Upgrade to Jaybird 4.0.9.java11 Closes gh-34263 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index eb860402ca..5e61b769a2 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -602,7 +602,7 @@ bom { ] } } - library("Jaybird", "4.0.8.java11") { + library("Jaybird", "4.0.9.java11") { group("org.firebirdsql.jdbc") { modules = [ "jaybird" From 497fa08bfe764847977664889d1ec90d9247b0e7 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:00 +0000 Subject: [PATCH 10/19] Upgrade to Jersey 3.1.1 Closes gh-34264 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 5e61b769a2..bbbbeac036 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -630,7 +630,7 @@ bom { ] } } - library("Jersey", "3.1.0") { + library("Jersey", "3.1.1") { group("org.glassfish.jersey") { imports = [ "jersey-bom" From 8cdd73f0886a4b305a9f848d0596edea7530f3da Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:05 +0000 Subject: [PATCH 11/19] Upgrade to jOOQ 3.17.8 Closes gh-34265 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index bbbbeac036..4381b452d1 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -658,7 +658,7 @@ bom { ] } } - library("jOOQ", "3.17.7") { + library("jOOQ", "3.17.8") { group("org.jooq") { modules = [ "jooq", From 45e9de3a30952860e12bc51a06248639d974014b Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:10 +0000 Subject: [PATCH 12/19] Upgrade to Lettuce 6.2.3.RELEASE Closes gh-34266 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 4381b452d1..1b2d9f766b 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -772,7 +772,7 @@ bom { ] } } - library("Lettuce", "6.2.2.RELEASE") { + library("Lettuce", "6.2.3.RELEASE") { group("io.lettuce") { modules = [ "lettuce-core" From 81bbabd1ccd67de226dbd23080aef1a7a9ece418 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:15 +0000 Subject: [PATCH 13/19] Upgrade to Lombok 1.18.26 Closes gh-34267 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 1b2d9f766b..5fb8116e28 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -806,7 +806,7 @@ bom { ] } } - library("Lombok", "1.18.24") { + library("Lombok", "1.18.26") { group("org.projectlombok") { modules = [ "lombok" From 2ac4a9fe9e87a75c3fa4bebfd11b4c94a3ab2041 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:20 +0000 Subject: [PATCH 14/19] Upgrade to Native Build Tools Plugin 0.9.20 Closes gh-34268 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index b2f18ccc52..61bb4c4d4e 100644 --- a/gradle.properties +++ b/gradle.properties @@ -6,6 +6,6 @@ org.gradle.jvmargs=-Xmx2g -Dfile.encoding=UTF-8 kotlinVersion=1.7.22 tomcatVersion=10.1.5 -nativeBuildToolsVersion=0.9.19 +nativeBuildToolsVersion=0.9.20 kotlin.stdlib.default.dependency=false From 5e9c00290ec2df2549f1349e2fd23061068f7975 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:25 +0000 Subject: [PATCH 15/19] Upgrade to Netty 4.1.89.Final Closes gh-34269 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 5fb8116e28..c0ccafe259 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1025,7 +1025,7 @@ bom { ] } } - library("Netty", "4.1.87.Final") { + library("Netty", "4.1.89.Final") { group("io.netty") { imports = [ "netty-bom" From 19bafec091f7a6bff576d0134ab9705934d6acac Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:31 +0000 Subject: [PATCH 16/19] Upgrade to Postgresql 42.5.4 Closes gh-34270 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c0ccafe259..a3256f1e59 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1067,7 +1067,7 @@ bom { ] } } - library("Postgresql", "42.5.1") { + library("Postgresql", "42.5.4") { group("org.postgresql") { modules = [ "postgresql" From c28d7fcc3680032c9e4dc592d6a4a6dfc6e0e85e Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:36 +0000 Subject: [PATCH 17/19] Upgrade to R2DBC Postgresql 1.0.1.RELEASE Closes gh-34271 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index a3256f1e59..42952ecd58 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1113,7 +1113,7 @@ bom { ] } } - library("R2DBC Postgresql", "1.0.0.RELEASE") { + library("R2DBC Postgresql", "1.0.1.RELEASE") { group("org.postgresql") { modules = [ "r2dbc-postgresql" From 3614232bfb39ae4ec689e1efb636fe2565f38c26 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:41 +0000 Subject: [PATCH 18/19] Upgrade to Spring HATEOAS 2.0.2 Closes gh-34272 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 42952ecd58..898af54e40 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1370,7 +1370,7 @@ bom { ] } } - library("Spring HATEOAS", "2.0.1") { + library("Spring HATEOAS", "2.0.2") { group("org.springframework.hateoas") { modules = [ "spring-hateoas" From 6983850a2cfd686d868c4f5fd72a866926531840 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Mon, 20 Feb 2023 14:54:46 +0000 Subject: [PATCH 19/19] Upgrade to Undertow 2.3.4.Final Closes gh-34273 --- .../autoconfigure/web/ServerProperties.java | 24 +++++++++++++++++-- .../UndertowWebServerFactoryCustomizer.java | 12 ++++++++-- ...dertowWebServerFactoryCustomizerTests.java | 9 ++++++- .../spring-boot-dependencies/build.gradle | 2 +- 4 files changed, 41 insertions(+), 6 deletions(-) diff --git a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java index d54ef0e832..b68c3fe6db 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java @@ -1,5 +1,5 @@ /* - * Copyright 2012-2022 the original author or authors. + * Copyright 2012-2023 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -1506,10 +1506,19 @@ public class ServerProperties { * Whether the server should decode percent encoded slash characters. Enabling * encoded slashes can have security implications due to different servers * interpreting the slash differently. Only enable this if you have a legacy - * application that requires it. + * application that requires it. Has no effect when server.undertow.decode-slash + * is set. */ private boolean allowEncodedSlash = false; + /** + * Whether encoded slash characters (%2F) should be decoded. Decoding can cause + * security problems if a front-end proxy does not perform the same decoding. Only + * enable this if you have a legacy application that requires it. When set, + * server.undertow.allow-encoded-slash has no effect. + */ + private Boolean decodeSlash; + /** * Whether the URL should be decoded. When disabled, percent-encoded characters in * the URL will be left as-is. @@ -1603,14 +1612,25 @@ public class ServerProperties { this.maxCookies = maxCookies; } + @DeprecatedConfigurationProperty(replacement = "server.undertow.decode-slash") + @Deprecated(forRemoval = true, since = "3.0.3") public boolean isAllowEncodedSlash() { return this.allowEncodedSlash; } + @Deprecated(forRemoval = true, since = "3.0.3") public void setAllowEncodedSlash(boolean allowEncodedSlash) { this.allowEncodedSlash = allowEncodedSlash; } + public Boolean getDecodeSlash() { + return this.decodeSlash; + } + + public void setDecodeSlash(Boolean decodeSlash) { + this.decodeSlash = decodeSlash; + } + public boolean isDecodeUrl() { return this.decodeUrl; } diff --git a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizer.java b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizer.java index 4a07c8e1cf..aaeacf0b11 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizer.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizer.java @@ -1,5 +1,5 @@ /* - * Copyright 2012-2022 the original author or authors. + * Copyright 2012-2023 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -98,7 +98,7 @@ public class UndertowWebServerFactoryCustomizer map.from(properties::getMaxParameters).to(serverOptions.option(UndertowOptions.MAX_PARAMETERS)); map.from(properties::getMaxHeaders).to(serverOptions.option(UndertowOptions.MAX_HEADERS)); map.from(properties::getMaxCookies).to(serverOptions.option(UndertowOptions.MAX_COOKIES)); - map.from(properties::isAllowEncodedSlash).to(serverOptions.option(UndertowOptions.ALLOW_ENCODED_SLASH)); + mapSlashProperties(properties, serverOptions); map.from(properties::isDecodeUrl).to(serverOptions.option(UndertowOptions.DECODE_URL)); map.from(properties::getUrlCharset).as(Charset::name).to(serverOptions.option(UndertowOptions.URL_CHARSET)); map.from(properties::isAlwaysSetKeepAlive).to(serverOptions.option(UndertowOptions.ALWAYS_SET_KEEP_ALIVE)); @@ -109,6 +109,14 @@ public class UndertowWebServerFactoryCustomizer map.from(properties.getOptions()::getSocket).to(socketOptions.forEach(socketOptions::option)); } + @SuppressWarnings({ "deprecation", "removal" }) + private void mapSlashProperties(Undertow properties, ServerOptions serverOptions) { + PropertyMapper map = PropertyMapper.get().alwaysApplyingWhenNonNull(); + map.from(properties::isAllowEncodedSlash).to(serverOptions.option(UndertowOptions.ALLOW_ENCODED_SLASH)); + map.from(properties::getDecodeSlash).to(serverOptions.option(UndertowOptions.DECODE_SLASH)); + + } + private boolean isPositive(Number value) { return value.longValue() > 0; } diff --git a/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizerTests.java b/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizerTests.java index 53fec27b8d..464dd440ed 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizerTests.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/UndertowWebServerFactoryCustomizerTests.java @@ -1,5 +1,5 @@ /* - * Copyright 2012-2022 the original author or authors. + * Copyright 2012-2023 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -150,11 +150,18 @@ class UndertowWebServerFactoryCustomizerTests { } @Test + @Deprecated(forRemoval = true, since = "3.0.3") void allowEncodedSlashes() { bind("server.undertow.allow-encoded-slash=true"); assertThat(boundServerOption(UndertowOptions.ALLOW_ENCODED_SLASH)).isTrue(); } + @Test + void enableSlashDecoding() { + bind("server.undertow.decode-slash=true"); + assertThat(boundServerOption(UndertowOptions.DECODE_SLASH)).isTrue(); + } + @Test void disableUrlDecoding() { bind("server.undertow.decode-url=false"); diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 898af54e40..f366eb3149 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1502,7 +1502,7 @@ bom { ] } } - library("Undertow", "2.3.3.Final") { + library("Undertow", "2.3.4.Final") { group("io.undertow") { modules = [ "undertow-core",