lams-github (): LDEV-5440 Update CSRFGuard from 4.1.3 to 4.3.0-jakarta...

Marcin Cieslak — Tue, 20 Feb 2024 13:08:23 +0100

Marcin Cieslak committed 881ef4e on branch in lams-github

LDEV-5440 Update CSRFGuard from 4.1.3 to 4.3.0-jakarta

Customisation was needed:

In CsrfGuardUtils use

public static String normalizeResourceURI(final String resourceURI) {

String normalizedResourceURI = resourceURI.startsWith("/") ? resourceURI : '/' + resourceURI;

// LAMS LDEV-4932 Replace multiple slashes with a single one, so it works the same as Spring MVC

normalizedResourceURI = normalizedResourceURI.replaceAll("/{2,}", "/");

return normalizedResourceURI;

}

Also update WF module schemas.

· /idea_project/.idea/libraries/3rdParty.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/compress.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/math.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/poi.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/sparse-bit-set.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/xmlbeans.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-tika/tika.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/basiclti-util.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/oauth.module.xml

(-2, +2)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/signpost.module.xml

(-2, +2)

| History

| Source

| Diff

· /lams_build/lib/batik/batik.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/clamav/clamav.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/clamav/kotlin.logging.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/clamav/kotlin.stdlib.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/csrfguard/csrf.module.xml

(-4, +4)

| History

| Source

| Diff

… 30 more files in changeset.

lams-github (v4.7): LDEV-5178 Check for common and breached passwords

Marcin Cieslak — Tue, 16 Feb 2021 14:00:47 +0100

Marcin Cieslak committed e888300 on branch v4.7, v4.8 in lams-github

LDEV-5178 Check for common and breached passwords

· /3rdParty_sources/passpol/com/codahale/passpol/BreachDatabase.java

(-0, +115)

| History

| Source

· /3rdParty_sources/passpol/com/codahale/passpol/HaveIBeenPwned.java

(-0, +77)

| History

| Source

· /3rdParty_sources/passpol/com/codahale/passpol/PasswordPolicy.java

(-0, +113)

| History

| Source

· /3rdParty_sources/passpol/com/codahale/passpol/PasswordSet.java

(-0, +62)

| History

| Source

· /3rdParty_sources/passpol/com/codahale/passpol/Status.java

(-0, +31)

| History

| Source

· /3rdParty_sources/versions.txt

(-0, +2)

| History

| Source

| Diff

· /lams_admin/conf/language/lams/ApplicationResources.properties

(-0, +1)

| History

| Source

| Diff

· /lams_admin/web/import/importexcel.jsp

(-0, +3)

| History

| Source

| Diff

· /lams_admin/web/orgPasswordChange.jsp

(-0, +3)

| History

| Source

| Diff

· /lams_admin/web/user.jsp

(-1, +3)

| History

| Source

| Diff

· /lams_admin/web/userChangePass.jsp

(-1, +3)

| History

| Source

| Diff

· /lams_build/3rdParty.userlibraries

(-5, +6)

| History

| Source

| Diff

· /lams_build/build.xml

(-0, +8)

| History

| Source

| Diff

· /lams_build/conf/j2ee/jboss-deployment-structure.xml

(-0, +1)

| History

| Source

| Diff

· /lams_build/lib/passpol/passpol-0.7.1-SNAPSHOT.jar

(binary)

| History

| Source

… 7 more files in changeset.

Fisheye on lams-github/lams_build/lib/passpol

lams-github (): LDEV-5440 Update CSRFGuard from 4.1.3 to 4.3.0-jakarta...

lams-github (v4.7): LDEV-5178 Check for common and breached passwords