Branch: refs/heads/main Home: https://github.com/resteasy/Resteasy Commit: 61720537dc426a25cf624d751cc83d874fc349a0 https://github.com/resteasy/Resteasy/commit/61720537dc426a25cf624d751cc83... Author: Tobias Wich <tobias.wich(a)ecsec.de&gt; Date: 2021-06-14 (Mon, 14 Jun 2021) Changed paths: M resteasy-core/src/main/java/org/jboss/resteasy/plugins/providers/FormUrlEncodedProvider.java A testsuite/unit-tests/src/test/java/org/jboss/resteasy/test/resource/FormParamInjectionTest.java A testsuite/unit-tests/src/test/java/org/jboss/resteasy/test/resource/resource/FormParamResource.java Log Message: ----------- [RESTEASY-2932] Limit form param splitting to the first equal sign This fix allows unencoded equals signs to be present in a FormParam value as defined in the whatwg URL spec (https://url.spec.whatwg.org/#application-x-www-form-urlencoded-percent-en...). See userinfo percent-encode set which is the foundation for the application/x-www-form-urlencoded percent-encode set. Add test for FormParam parsing There is one test showing that values are not split at successive equal signs. Commit: 4ce2818a0e1f24369d71f49ea293ad6204e8c5f5 https://github.com/resteasy/Resteasy/commit/4ce2818a0e1f24369d71f49ea293a... Author: James R. Perkins <jperkins(a)redhat.com&gt; Date: 2021-06-16 (Wed, 16 Jun 2021) Changed paths: M resteasy-core/src/main/java/org/jboss/resteasy/plugins/providers/FormUrlEncodedProvider.java A testsuite/unit-tests/src/test/java/org/jboss/resteasy/test/resource/FormParamInjectionTest.java A testsuite/unit-tests/src/test/java/org/jboss/resteasy/test/resource/resource/FormParamResource.java Log Message: ----------- Merge pull request #2824 from sake/form-param-splitting [RESTEASY-2932] FormParam splitting https://issues.redhat.com/browse/RESTEASY-2932 Compare: https://github.com/resteasy/Resteasy/compare/d611d101f141...4ce2818a0e1f