Skip to content

Commit f6add35

Browse files
committed
Upgrade to Tomcat 10.1.7
Closes gh-34674
1 parent fe77ddc commit f6add35

File tree

4 files changed

+23
-6
lines changed

4 files changed

+23
-6
lines changed

gradle.properties

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ org.gradle.parallel=true
55
org.gradle.jvmargs=-Xmx2g -Dfile.encoding=UTF-8
66

77
kotlinVersion=1.7.22
8-
tomcatVersion=10.1.5
8+
tomcatVersion=10.1.7
99
nativeBuildToolsVersion=0.9.20
1010

1111
kotlin.stdlib.default.dependency=false

spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -974,8 +974,13 @@ public static class Remoteip {
974974
+ "192\\.168\\.\\d{1,3}\\.\\d{1,3}|" // 192.168/16
975975
+ "169\\.254\\.\\d{1,3}\\.\\d{1,3}|" // 169.254/16
976976
+ "127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}|" // 127/8
977+
+ "100\\.6[4-9]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
978+
+ "100\\.[7-9]{1}\\d{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
979+
+ "100\\.1[0-1]{1}\\d{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
980+
+ "100\\.12[0-7]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
977981
+ "172\\.1[6-9]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 172.16/12
978-
+ "172\\.2[0-9]{1}\\.\\d{1,3}\\.\\d{1,3}|172\\.3[0-1]{1}\\.\\d{1,3}\\.\\d{1,3}|" //
982+
+ "172\\.2[0-9]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 172.16/12
983+
+ "172\\.3[0-1]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 172.16/12
979984
+ "0:0:0:0:0:0:0:1|::1";
980985

981986
/**

spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/TomcatWebServerFactoryCustomizerTests.java

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -342,8 +342,13 @@ private void testRemoteIpValveConfigured() {
342342
+ "192\\.168\\.\\d{1,3}\\.\\d{1,3}|" // 192.168/16
343343
+ "169\\.254\\.\\d{1,3}\\.\\d{1,3}|" // 169.254/16
344344
+ "127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}|" // 127/8
345+
+ "100\\.6[4-9]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
346+
+ "100\\.[7-9]{1}\\d{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
347+
+ "100\\.1[0-1]{1}\\d{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
348+
+ "100\\.12[0-7]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 100.64.0.0/10
345349
+ "172\\.1[6-9]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 172.16/12
346-
+ "172\\.2[0-9]{1}\\.\\d{1,3}\\.\\d{1,3}|172\\.3[0-1]{1}\\.\\d{1,3}\\.\\d{1,3}|" //
350+
+ "172\\.2[0-9]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 172.16/12
351+
+ "172\\.3[0-1]{1}\\.\\d{1,3}\\.\\d{1,3}|" // 172.16/12
347352
+ "0:0:0:0:0:0:0:1|::1";
348353
assertThat(remoteIpValve.getInternalProxies()).isEqualTo(expectedInternalProxies);
349354
}

spring-boot-project/spring-boot/src/main/java/org/springframework/boot/web/embedded/tomcat/TldPatterns.java

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
* Copyright 2012-2022 the original author or authors.
2+
* Copyright 2012-2023 the original author or authors.
33
*
44
* Licensed under the Apache License, Version 2.0 (the "License");
55
* you may not use this file except in compliance with the License.
@@ -35,10 +35,12 @@ final class TldPatterns {
3535
Set<String> skipPatterns = new LinkedHashSet<>();
3636
skipPatterns.add("annotations-api.jar");
3737
skipPatterns.add("ant-junit*.jar");
38-
skipPatterns.add("ant-launcher.jar");
39-
skipPatterns.add("ant.jar");
38+
skipPatterns.add("ant-launcher*.jar");
39+
skipPatterns.add("ant*.jar");
4040
skipPatterns.add("asm-*.jar");
4141
skipPatterns.add("aspectj*.jar");
42+
skipPatterns.add("bcel*.jar");
43+
skipPatterns.add("biz.aQute.bnd*.jar");
4244
skipPatterns.add("bootstrap.jar");
4345
skipPatterns.add("catalina-ant.jar");
4446
skipPatterns.add("catalina-ha.jar");
@@ -51,6 +53,7 @@ final class TldPatterns {
5153
skipPatterns.add("commons-beanutils*.jar");
5254
skipPatterns.add("commons-codec*.jar");
5355
skipPatterns.add("commons-collections*.jar");
56+
skipPatterns.add("commons-compress*.jar");
5457
skipPatterns.add("commons-daemon.jar");
5558
skipPatterns.add("commons-dbcp*.jar");
5659
skipPatterns.add("commons-digester*.jar");
@@ -93,6 +96,8 @@ final class TldPatterns {
9396
skipPatterns.add("mail*.jar");
9497
skipPatterns.add("objenesis-*.jar");
9598
skipPatterns.add("oraclepki.jar");
99+
skipPatterns.add("org.hamcrest.core_*.jar");
100+
skipPatterns.add("org.junit_*.jar");
96101
skipPatterns.add("oro-*.jar");
97102
skipPatterns.add("servlet-api-*.jar");
98103
skipPatterns.add("servlet-api.jar");
@@ -111,6 +116,7 @@ final class TldPatterns {
111116
skipPatterns.add("tomcat-util.jar");
112117
skipPatterns.add("tomcat-websocket.jar");
113118
skipPatterns.add("tools.jar");
119+
skipPatterns.add("unboundid-ldapsdk-*.jar");
114120
skipPatterns.add("websocket-api.jar");
115121
skipPatterns.add("websocket-client-api.jar");
116122
skipPatterns.add("wsdl4j*.jar");
@@ -119,6 +125,7 @@ final class TldPatterns {
119125
skipPatterns.add("xmlParserAPIs-*.jar");
120126
skipPatterns.add("xmlParserAPIs.jar");
121127
skipPatterns.add("xom-*.jar");
128+
122129
TOMCAT_SKIP = Collections.unmodifiableSet(skipPatterns);
123130
}
124131

0 commit comments

Comments
 (0)