[hibernate-commits] [hibernate/hibernate-validator] df2fe2: HV-1774 Test arbitrary code injection through buil...

Yoann Rodière noreply at github.com
Wed May 6 09:08:45 EDT 2020


  Branch: refs/heads/6.0
  Home:   https://github.com/hibernate/hibernate-validator
  Commit: df2fe2c1e42bad5b12ab967d5d0db3cf49ac7af9
      https://github.com/hibernate/hibernate-validator/commit/df2fe2c1e42bad5b12ab967d5d0db3cf49ac7af9
  Author: Yoann Rodière <yoann at hibernate.org>
  Date:   2020-05-06 (Wed, 06 May 2020)

  Changed paths:
    M engine/src/test/java/org/hibernate/validator/test/constraints/ConstraintValidatorContextTest.java

  Log Message:
  -----------
  HV-1774 Test arbitrary code injection through buildConstraintViolationWithTemplate()


  Commit: 29bd0f42bf63e28d9a71adef02af67b319144576
      https://github.com/hibernate/hibernate-validator/commit/29bd0f42bf63e28d9a71adef02af67b319144576
  Author: Yoann Rodière <yoann at hibernate.org>
  Date:   2020-05-06 (Wed, 06 May 2020)

  Changed paths:
    M engine/src/main/java/org/hibernate/validator/internal/engine/messageinterpolation/parser/ELState.java
    M engine/src/test/java/org/hibernate/validator/test/internal/engine/messageinterpolation/TokenCollectorTest.java

  Log Message:
  -----------
  HV-1774 Do not interpret '$\A{1+1}' in message templates


  Commit: 16b77f08c2e9983f33538688107d6570986e31c1
      https://github.com/hibernate/hibernate-validator/commit/16b77f08c2e9983f33538688107d6570986e31c1
  Author: Yoann Rodière <yoann at hibernate.org>
  Date:   2020-05-06 (Wed, 06 May 2020)

  Changed paths:
    A engine/src/test/java/org/hibernate/validator/test/internal/engine/messageinterpolation/AbstractTokenCollectorTest.java
    A engine/src/test/java/org/hibernate/validator/test/internal/engine/messageinterpolation/TokenCollectorMessageExpressionTest.java
    A engine/src/test/java/org/hibernate/validator/test/internal/engine/messageinterpolation/TokenCollectorMessageParameterTest.java
    R engine/src/test/java/org/hibernate/validator/test/internal/engine/messageinterpolation/TokenCollectorTest.java

  Log Message:
  -----------
  HV-1774 Add a few tests to demonstrate the behavior of TokenCollector


  Commit: 4b9f2a1a3e1c67fbd29a7fc710c611d7aca6eab9
      https://github.com/hibernate/hibernate-validator/commit/4b9f2a1a3e1c67fbd29a7fc710c611d7aca6eab9
  Author: Yoann Rodière <yoann at hibernate.org>
  Date:   2020-05-06 (Wed, 06 May 2020)

  Changed paths:
    M engine/src/main/java/org/hibernate/validator/internal/engine/messageinterpolation/parser/ELState.java
    M engine/src/main/java/org/hibernate/validator/internal/engine/messageinterpolation/parser/InterpolationTermState.java
    M engine/src/main/java/org/hibernate/validator/internal/engine/messageinterpolation/parser/MessageState.java
    M engine/src/main/java/org/hibernate/validator/internal/util/logging/Log.java

  Log Message:
  -----------
  HV-1774 Fix an invalid error message for unbalanced '{'/'}'


Compare: https://github.com/hibernate/hibernate-validator/compare/5903f446b6b2...4b9f2a1a3e1c



More information about the hibernate-commits mailing list