Tags

Tag for release: jetty-12.0.0.alpha1

 + 8474 Jetty 12 : Resource API Review
 + 8493 Review HTTP client feature `setRemoveIdleDestinations`
 + 8532 Review System.nanoTime() usages
 + 8540 Maven pom is not correct for `org.eclipse.jetty/infinispan-embedded`
   and `org.eclipse.jetty/infinispan-remote`
 + 8578 `getRequestURL` can append "null" if `getRequestURI` is unspecified in
   an authority-form request-target

Tag for release: jetty-11.0.12

 + 7970 Maven Plugin - the option to set extraClasspath in the plugin
   configuration isn't working
 + 8007 Support Loom
 + 8151 `JakartaWebSocketSession.close()` blocks long time when called from
   `SendHandlerCallback`
 + 8152 jetty.sh does not read JAVA_OPTIONS anymore
 + 8170 WebSockets closed abruptly when using HTTP/2
 + 8196 Remove unused jetty-plus.xml file
 + 8206 Stopping server from within AbstractConnector#accept fails and results
   in a partially stopped QueuedThreadPool
 + 8216 OpenID logout / more extensibible OpenIdConfiguration
 + 8222 Jetty start.jar fails with NullPointerException when referencing a non
   existent module and using JVM args
 + 8259 Symlinks cause 404 with DefaultServlet when its "resourceBase" is
   different from ContextHandler's
 + 8294 java.lang.ClassCastException: class org.eclipse.jetty.http.HttpField
   cannot be cast to class org.eclipse.jetty.http.HttpCookie$SetCookieHttpField
 + 8296 SymlinkAllowedResourceAliasChecker is initialized after checkAlias is
   called resulting that access to resource is denied
 + 8319 Allow configuring initial queue size per destination
 + 8353 Automatic pongs should not be sent when connection is closed
 + 8414 BlockingArrayQueue drops all contents on drain
 + 8493 Review HTTP client feature `setRemoveIdleDestinations`
 + 8497 `jetty-bom/11.0.11` depends on `jetty-slf4j-impl/10.0.8-SNAPSHOT` that
   cause 404 error
 + 8532 Review System.nanoTime() usages
 + 8540 Maven pom is not correct for `org.eclipse.jetty/infinispan-embedded`
   and `org.eclipse.jetty/infinispan-remote`
 + 8578 `getRequestURL` can append "null" if `getRequestURI` is unspecified in
   an authority-form request-target

Tag for release: jetty-10.0.12-SNAPSHOT

 + 7970 Maven Plugin - the option to set extraClasspath in the plugin
   configuration isn't working
 + 8007 Support Loom
 + 8151 `JakartaWebSocketSession.close()` blocks long time when called from
   `SendHandlerCallback`
 + 8152 jetty.sh does not read JAVA_OPTIONS anymore
 + 8170 WebSockets closed abruptly when using HTTP/2
 + 8196 Remove unused jetty-plus.xml file
 + 8206 Stopping server from within AbstractConnector#accept fails and results
   in a partially stopped QueuedThreadPool
 + 8216 OpenID logout / more extensibible OpenIdConfiguration
 + 8222 Jetty start.jar fails with NullPointerException when referencing a non
   existent module and using JVM args
 + 8259 Symlinks cause 404 with DefaultServlet when its "resourceBase" is
   different from ContextHandler's
 + 8294 java.lang.ClassCastException: class org.eclipse.jetty.http.HttpField
   cannot be cast to class org.eclipse.jetty.http.HttpCookie$SetCookieHttpField
 + 8296 SymlinkAllowedResourceAliasChecker is initialized after checkAlias is
   called resulting that access to resource is denied
 + 8319 Allow configuring initial queue size per destination
 + 8353 Automatic pongs should not be sent when connection is closed
 + 8414 BlockingArrayQueue drops all contents on drain
 + 8493 Review HTTP client feature `setRemoveIdleDestinations`
 + 8532 Review System.nanoTime() usages
 + 8540 Maven pom is not correct for `org.eclipse.jetty/infinispan-embedded`
   and `org.eclipse.jetty/infinispan-remote`
 + 8578 `getRequestURL` can append "null" if `getRequestURI` is unspecified in
   an authority-form request-target

Tag for release: jetty-9.4.49.v20220914

 + 8414 BlockingArrayQueue drops all contents on drain
 + 8493 Review HTTP client feature `setRemoveIdleDestinations`
 + 8578 `getRequestURL` can append "null" if `getRequestURI` is unspecified in
   an authority-form request-target

jetty-12.0.0.alpha0 - 22 August 2022
 + First alpah release of Jetty 12. A lot changes but very good changes!

jetty-11.0.11 - 21 June 2022

 + 8184 All suffix globs except first fail to match if path has `.` character
   in prefix section

jetty-10.0.11 - 21 June 2022

 + 8184 All suffix globs except first fail to match if path has `.` character
   in prefix section

jetty-9.4.48.v20220622 - 21 June 2022

 + 8184 All suffix globs except first fail to match if path has . character in
   prefix in Jetty 11.0.10

jetty-11.0.10 - 16 June 2022

 + 1771 Add module for SecuredRedirect support
 + 4414 GZipHandler not excluding inflation for specified paths
 + 7635 QPACK decoder should fail connection if the encoder blocks more than
   SETTINGS_QPACK_BLOCKED_STREAMS
 + 7748 Allow overriding of url-pattern mapping in ServletContextHandler to
   allow for regex or uri-template matching
 + 7754 jetty.sh ignores JAVA_OPTIONS environment variable
 + 7801 Session cookie can be set twice after session id changed
 + 7818 Modifying of HTTP headers in HttpChannel.Listener#onResponseBegin is no
   longer possible with Jetty 10
 + 7855 Remove accidentally included package-info.class in all packages
 + 7858 GZipHandler does not play nice with other handlers in HandlerCollection
 + 7863 Default servlet drops first accept-encoding header if there is more
   than one.
 + 7880 DefaultServlet should not overwrite programmatically configured
   precompressed formats with defaults
 + 7891 Better Servlet PathMappings for Regex
 + 7918 PathMappings.asPathSpec does not allow root ServletPathSpec
 + 7935 Review HTTP/2 error handling
 + 7975 `ForwardedRequestCustomizer` setters do not clear existing handlers
 + 7977 UpgradeHttpServletRequest.setAttribute &
   UpgradeHttpServletRequest.removeAttribute can throw NullPointerException
 + 7994 Ability to construct a detached client Request
 + 8014 Review HttpRequest URI construction
 + 8057 Support Http Response 103 (Early Hints)
 + 8067 Wall time usage in DoSFilter RateTracker results in false positive
   alert
 + 8088 Add option to configure exitVm on ShutdownMonitor from System
   properties
 + 8161 Improve SSLConnection buffers handling

jetty-10.0.10 - 16 June 2022

:q
 + 1771 Add module for SecuredRedirect support
 + 4414 GZipHandler not excluding inflation for specified paths
 + 7635 QPACK decoder should fail connection if the encoder blocks more than
   SETTINGS_QPACK_BLOCKED_STREAMS
 + 7748 Allow overriding of url-pattern mapping in ServletContextHandler to
   allow for regex or uri-template matching
 + 7754 jetty.sh ignores JAVA_OPTIONS environment variable
 + 7801 Session cookie can be set twice after session id changed
 + 7818 Modifying of HTTP headers in HttpChannel.Listener#onResponseBegin is no
   longer possible with Jetty 10
 + 7855 Remove accidentally included package-info.class in all packages
 + 7858 GZipHandler does not play nice with other handlers in HandlerCollection
 + 7863 Default servlet drops first accept-encoding header if there is more
   than one.
 + 7880 DefaultServlet should not overwrite programmatically configured
   precompressed formats with defaults
 + 7891 Better Servlet PathMappings for Regex
 + 7918 PathMappings.asPathSpec does not allow root ServletPathSpec
 + 7935 Review HTTP/2 error handling
 + 7975 `ForwardedRequestCustomizer` setters do not clear existing handlers
 + 7977 UpgradeHttpServletRequest.setAttribute &
   UpgradeHttpServletRequest.removeAttribute can throw NullPointerException
 + 7994 Ability to construct a detached client Request
 + 8014 Review HttpRequest URI construction
 + 8057 Support Http Response 103 (Early Hints)
 + 8067 Wall time usage in DoSFilter RateTracker results in false positive
   alert
 + 8088 Add option to configure exitVm on ShutdownMonitor from System
   properties
 + 8161 Improve SSLConnection buffers handling

jetty-9.4.47.v20220610 - 10 June 2022

 + 4717 High CPU spikes with jetty winstone threads
 + 7748 Allow overriding of url-pattern mapping in ServletContextHandler to
   allow for regex or uri-template matching
 + 7801 Session cookie can be set twice after session id changed
 + 7855 Remove accidentally included package-info.class in all packages
 + 7858 GZipHandler does not play nice with other handlers in HandlerCollection
 + 7863 Default servlet drops first accept-encoding header if there is more
   than one.
 + 7918 PathMappings.asPathSpec does not allow root ServletPathSpec
 + 7935 Review HTTP/2 error handling
 + 8014 Review HttpRequest URI construction
 + 8067 Wall time usage in DoSFilter RateTracker results in false positive
   alert
 + 8088 Add option to configure exitVm on ShutdownMonitor from System
   properties

Tag for release: jetty-9.4.46.v20220331

 + 5965 Option --write-module-graph produces wrong .dot file
 + 6756 Deprecate `/jetty-spring/` artifact in `jetty-9.4.x` releases.
 + 7518 ArrayTrie getBest fails to match the empty string entry in certain
   cases
 + 7548 Interrupt flag is not always cleared in between requests
 + 7567 Gzip compression not working for multipart/form-data when added to the
   allowed list using addIncludedMimeTypes.
 + 7569 Miconfigured headerCacheSize in can result in IllegalArgumentException
 + 7615 HttpServletResponse.encodeURL not working for URLs starting with ../

Tag for release: jetty-11.0.9

 + 5681 Unrecognized jetty-home/start.jar command line option not reported
   clearly
 + 5965 Option --write-module-graph produces wrong .dot file
 + 6879 Remove jminix (not maintained) module as hawtio provide same features
 + 7182 jetty.sh start process should remove jetty_state whenever deleting the
   pid
 + 7344 Incompatible with jacoco due to shutdown race condition
 + 7414 QoSFilter.setMaxRequests throws NullPointerException
 + 7513 Getter/setter type mismatch for mbean attribute file in class
   org.eclipse.jetty.deploy.PropertiesConfigurationManager
 + 7517 Some ArrayTrie methods throw StackOverflowError when cointaining a very
   large entry
 + 7518 ArrayTrie getBest fails to match the empty string entry in certain
   cases
 + 7545 Named arguments do not work in jetty-openid.xml
 + 7548 Interrupt flag is not always cleared in between requests
 + 7567 Gzip compression not working for multipart/form-data when added to the
   allowed list using addIncludedMimeTypes.
 + 7573 WebSockets - "Unsupported PathParam Type: java.lang.Integer"
 + 7575 Misleading docs for `HttpClientTransportDynamic`
 + 7613 Configurations.add(Configuration) results in
   UnsupportedOperationException
 + 7615 HttpServletResponse.encodeURL not working for URLs starting with ../
 + 7617 Logback-access RequestLog not working
 + 7625 HTTP/3 error against www.google.com
 + 7677 jetty-maven-plugin - maven internal dependencies included on webapp
   classloader
 + 7683 GZIPContentDecoder ignores setUseInputDirectByteBuffers setting and
   always uses non-direct buffers (causing GC locking)
 + 7688 Read data to native memory from HttpInput
 + 7748 Allow overriding of url-pattern mapping in ServletContextHandler to
   allow for regex or uri-template matching

Tag for release: jetty-10.0.9

 + 5681 Unrecognized jetty-home/start.jar command line option not reported
   clearly
 + 5965 Option --write-module-graph produces wrong .dot file
 + 6879 Remove jminix (not maintained) module as hawtio provide same features
 + 7182 jetty.sh start process should remove jetty_state whenever deleting the
   pid
 + 7344 Incompatible with jacoco due to shutdown race condition
 + 7414 QoSFilter.setMaxRequests throws NullPointerException
 + 7513 Getter/setter type mismatch for mbean attribute file in class
   org.eclipse.jetty.deploy.PropertiesConfigurationManager
 + 7517 Some ArrayTrie methods throw StackOverflowError when cointaining a very
   large entry
 + 7518 ArrayTrie getBest fails to match the empty string entry in certain
   cases
 + 7545 Named arguments do not work in jetty-openid.xml
 + 7548 Interrupt flag is not always cleared in between requests
 + 7567 Gzip compression not working for multipart/form-data when added to the
   allowed list using addIncludedMimeTypes.
 + 7573 WebSockets - "Unsupported PathParam Type: java.lang.Integer"
 + 7575 Misleading docs for `HttpClientTransportDynamic`
 + 7613 Configurations.add(Configuration) results in
   UnsupportedOperationException
 + 7615 HttpServletResponse.encodeURL not working for URLs starting with ../
 + 7617 Logback-access RequestLog not working
 + 7625 HTTP/3 error against www.google.com
 + 7677 jetty-maven-plugin - maven internal dependencies included on webapp
   classloader
 + 7683 GZIPContentDecoder ignores setUseInputDirectByteBuffers setting and
   always uses non-direct buffers (causing GC locking)
 + 7688 Read data to native memory from HttpInput
 + 7748 Allow overriding of url-pattern mapping in ServletContextHandler to
   allow for regex or uri-template matching

Tag for release: jetty-9.4.46.v20220330

 + 5965 Option --write-module-graph produces wrong .dot file
 + 7518 ArrayTrie getBest fails to match the empty string entry in certain
   cases
 + 7548 Interrupt flag is not always cleared in between requests
 + 7567 Gzip compression not working for multipart/form-data when added to the
   allowed list using addIncludedMimeTypes.
 + 7569 Miconfigured headerCacheSize in can result in IllegalArgumentException
 + 7615 HttpServletResponse.encodeURL not working for URLs starting with ../

Tag for release: jetty-9.4.46.v20220328 - 28 March 2022

 + 5965 Option --write-module-graph produces wrong .dot file
 + 7518 ArrayTrie getBest fails to match the empty string entry in certain
   cases
 + 7548 Interrupt flag is not always cleared in between requests
 + 7567 Gzip compression not working for multipart/form-data when added to the
   allowed list using addIncludedMimeTypes.
 + 7569 Miconfigured headerCacheSize in can result in IllegalArgumentException
 + 7615 HttpServletResponse.encodeURL not working for URLs starting with ../

Tag for release: jetty-11.0.8

 + 2504 Expose more WebSocket details in JMX and Server Dump
 + 4275 Path Normalization/Traversal - Context Matching
 + 4317 EventSource does not work with GzipHandler
 + 6017 Property overriding does not work
 + 6282 SecuredRedirectHandler should probably redirect with 301
 + 6497 Replace SameFileAliasChecker
 + 6728 QUIC and HTTP/3
 + 6730 HTTP3: update Quiche to 0.9.0
 + 6965 Expose Spec `ServerContainer.upgrade()` API
 + 6973 Jetty starts consuming CPU that remains high even without any traffic
 + 6974 Major websocket memory change in 9.4.36
 + 6980 ELContextCleaner failed because cannot access a member of class
   javax.el.BeanELResolver with modifiers "private static final"
 + 6985 ELContextCleaner references javax class in jetty-11
 + 6987 jetty-unixdomain-server is missing from jetty-bom
 + 6990 UnixDomainServerConnector throws misleading exception on invalid socket
   path
 + 7008 Problem with jetty.sh start regression 10.0.6 -> 10.0.7 when using
   JETTY_USER
 + 7012 Remove all old geronimo spec jars from jetty-10
 + 7031 ResponseWriter.println(char) does not print newline
 + 7042 Simplify configuration to use different OpenIdConfiguration per webapp.
 + 7059 NPE in AllowedResourceAliasChecker.getPath()
 + 7063 Simplify command line use of org.eclipse.jetty.util.Password
 + 7064 Cleanup or clarify `(null)` in output of `--list-config`
 + 7086 WebSocket: java.lang.IllegalStateException: already released
   RetainableByteBuffer
 + 7103 Rework LaF of distro landing page
 + 7107 Client timeout and async close exceptions when setting max duration on
   pool
 + 7109 Deprecate UnixSocket JNR support
 + 7111 Add support to deprecate jetty-home modules
 + 7113 Improve Unix-Domain client documentation
 + 7124 Add default methods on LifeCycle.Listener interface
 + 7131 Use Charset instead of encoding string where possible
 + 7157 Multiplexed connection pools retain CLOSED entries
 + 7160 HttpURI considers %25 to be ambiguous, preventing access to static
   resources with % in their name
 + 7240 Clarify and javadoc InvocationType
 + 7243 Reset pooled ByteBuffer endianness
 + 7262 Allow the SerlvetHandler.getFilterChain method to be overridden.
 + 7277 Allow override of `ServletRequest.getLocalName()` and `.getLocalPort()`
   in post-intermediary scenarios
 + 7280 Interceptors don't get destroyed in HttpInput
 + 7281 EOFs are not passed to interceptors any more - shouldn't they?
 + 7284 HttpInput reopen/recycle cleanup
 + 7297 Deprecate log4j 1.x support
 + 7313 addBean(_attributes); only called in the Convenience constructor of
   org.eclipse.jetty.server.Server
 + 7327 jetty-slf4j-impl missing from BOM
 + 7348 Slow CONNECT request causes NPE
 + 7351 Large WebSocket payloads with permessage-deflate hang on 10.0.7
 + 7354 Demo jars should not be in jetty-home
 + 7369 Document CustomRequestLog
 + 7375 Some environments require Request scoping during session save
 + 7435 Investigate Infinispan transitive dependencies
 + 7494 Remove modules in Jetty 11 that are not supporting jakarta.servlet yet
 + 7496 Transient 400: Bad Request responses in jetty-9.4.45.v20220128
 + 7514 Adding InheritedListeners to already-started components can cause
   IllegalStateException
 + 7523 Typo in AnnotationConfiguration
 + 7524 Missing package in JmxConfiguration
 + 7529 Upgrade quiche to version 0.11.0

Tag for release: jetty-10.0.8

 + 2504 Expose more WebSocket details in JMX and Server Dump
 + 4275 Path Normalization/Traversal - Context Matching
 + 4317 EventSource does not work with GzipHandler
 + 6017 Property overriding does not work
 + 6282 SecuredRedirectHandler should probably redirect with 301
 + 6497 Replace SameFileAliasChecker
 + 6728 QUIC and HTTP/3
 + 6730 HTTP3: update Quiche to 0.9.0
 + 6965 Expose Spec `ServerContainer.upgrade()` API
 + 6973 Jetty starts consuming CPU that remains high even without any traffic
 + 6974 Major websocket memory change in 9.4.36
 + 6980 ELContextCleaner failed because cannot access a member of class
   javax.el.BeanELResolver with modifiers "private static final"
 + 6987 jetty-unixdomain-server is missing from jetty-bom
 + 6990 UnixDomainServerConnector throws misleading exception on invalid socket
   path
 + 7008 Problem with jetty.sh start regression 10.0.6 -> 10.0.7 when using
   JETTY_USER
 + 7012 Remove all old geronimo spec jars from jetty-10
 + 7031 ResponseWriter.println(char) does not print newline
 + 7042 Simplify configuration to use different OpenIdConfiguration per webapp.
 + 7059 NPE in AllowedResourceAliasChecker.getPath()
 + 7063 Simplify command line use of org.eclipse.jetty.util.Password
 + 7064 Cleanup or clarify `(null)` in output of `--list-config`
 + 7086 WebSocket: java.lang.IllegalStateException: already released
   RetainableByteBuffer
 + 7103 Rework LaF of distro landing page
 + 7107 Client timeout and async close exceptions when setting max duration on
   pool
 + 7109 Deprecate UnixSocket JNR support
 + 7111 Add support to deprecate jetty-home modules
 + 7113 Improve Unix-Domain client documentation
 + 7124 Add default methods on LifeCycle.Listener interface
 + 7131 Use Charset instead of encoding string where possible
 + 7157 Multiplexed connection pools retain CLOSED entries
 + 7160 HttpURI considers %25 to be ambiguous, preventing access to static
   resources with % in their name
 + 7240 Clarify and javadoc InvocationType
 + 7243 Reset pooled ByteBuffer endianness
 + 7262 Allow the SerlvetHandler.getFilterChain method to be overridden.
 + 7277 Allow override of `ServletRequest.getLocalName()` and `.getLocalPort()`
   in post-intermediary scenarios
 + 7280 Interceptors don't get destroyed in HttpInput
 + 7281 EOFs are not passed to interceptors any more - shouldn't they?
 + 7284 HttpInput reopen/recycle cleanup
 + 7297 Deprecate log4j 1.x support
 + 7313 addBean(_attributes); only called in the Convenience constructor of
   org.eclipse.jetty.server.Server
 + 7327 jetty-slf4j-impl missing from BOM
 + 7348 Slow CONNECT request causes NPE
 + 7351 Large WebSocket payloads with permessage-deflate hang on 10.0.7
 + 7354 Demo jars should not be in jetty-home
 + 7369 Document CustomRequestLog
 + 7375 Some environments require Request scoping during session save
 + 7435 Investigate Infinispan transitive dependencies
 + 7496 Transient 400: Bad Request responses in jetty-9.4.45.v20220128
 + 7514 Adding InheritedListeners to already-started components can cause
   IllegalStateException
 + 7523 Typo in AnnotationConfiguration
 + 7524 Missing package in JmxConfiguration
 + 7529 Upgrade quiche to version 0.11.0

Tag for release: jetty-9.4.45.v20220203

 + 4275 Path Normalization/Traversal - Context Matching
 + 6497 Replace SameFileAliasChecker
 + 6687 Upgrade Infinispan in all active Jetty branches
 + 6965 Expose Spec `ServerContainer.upgrade()` API
 + 6969 Getting 404 failures when trying to enable `logging-log4j` module.
 + 6974 Major websocket memory change in 9.4.36
 + 7031 ResponseWriter.println(char) does not print newline
 + 7059 NPE in AllowedResourceAliasChecker.getPath()
 + 7073 Error in parse parameter in broken UTF-8 encoding
 + 7078 CompressionPools are not shared between multiple contexts for 9.4
   WebSocket
 + 7107 Client timeout and async close exceptions when setting max duration on
   pool
 + 7124 Add default methods on LifeCycle.Listener interface
 + 7157 Multiplexed connection pools retain CLOSED entries
 + 7243 Reset pooled ByteBuffer endianness
 + 7266 Wrong ALPN jars are selected for newer versions of JDK8
 + 7271 It is necessary to set MAX_CAPACITY to ArrayTernaryTrie/ArrayTrie
 + 7277 Allow override of `ServletRequest.getLocalName()` and `.getLocalPort()`
   in post-intermediary scenarios
 + 7297 Deprecate log4j 1.x support
 + 7348 Slow CONNECT request causes NPE
 + 7375 Some environments require Request scoping during session save
 + 7435 Investigate Infinispan transitive dependencies
 + 7440 ContextHandler.getAliasChecks() breaks Spring Boot
 + 7496 Transient 400: Bad Request responses in jetty-9.4.45.v20220128

Tag for release: jetty-9.4.45.v20220128

 + 4275 Path Normalization/Traversal - Context Matching
 + 6497 Replace SameFileAliasChecker
 + 6687 Upgrade Infinispan in all active Jetty branches
 + 6965 Expose Spec `ServerContainer.upgrade()` API
 + 6969 Getting 404 failures when trying to enable `logging-log4j` module.
 + 6974 Major websocket memory change in 9.4.36
 + 7031 ResponseWriter.println(char) does not print newline
 + 7059 NPE in AllowedResourceAliasChecker.getPath()
 + 7073 Error in parse parameter in broken UTF-8 encoding
 + 7078 CompressionPools are not shared between multiple contexts for 9.4
   WebSocket
 + 7107 Client timeout and async close exceptions when setting max duration on
   pool
 + 7124 Add default methods on LifeCycle.Listener interface
 + 7157 Multiplexed connection pools retain CLOSED entries
 + 7243 Reset pooled ByteBuffer endianness
 + 7266 Wrong ALPN jars are selected for newer versions of JDK8
 + 7271 It is necessary to set MAX_CAPACITY to ArrayTernaryTrie/ArrayTrie
 + 7277 Allow override of `ServletRequest.getLocalName()` and `.getLocalPort()`
   in post-intermediary scenarios
 + 7297 Deprecate log4j 1.x support
 + 7348 Slow CONNECT request causes NPE
 + 7375 Some environments require Request scoping during session save
 + 7435 Investigate Infinispan transitive dependencies
 + 7440 ContextHandler.getAliasChecks() breaks Spring Boot