andreacavalli/netty5
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
6,283 Commits 27 Branches 234 Tags 84 MiB
Java 99.8%
Shell 0.1%
d98b21be04
Go to file
Stephane Landelle d98b21be04 Validate cookie name and value characters Motivation: 
RFC6265 specifies which characters are allowed in a cookie name and value.

Netty is currently too lax, which can used for HttpOnly escaping.

Modification:

In ServerCookieDecoder: discard cookie key-value pairs that contain invalid characters.
In ClientCookieEncoder: throw an exception when trying to encode cookies with invalid characters.

Result:

The problem described in the motivation section is fixed.
2015-05-07 06:36:40 +02:00
all [maven-release-plugin] prepare for next development iteration 2015-03-31 22:06:30 -04:00
buffer [#3623] CompositeByteBuf.iterator() should return optimized Iterable 2015-04-20 10:45:28 +02:00
codec Remove memory copy when extract frame in LengthFieldBasedFrameDecoder 2015-04-29 08:42:55 +02:00
codec-http Validate cookie name and value characters Motivation: 2015-05-07 06:36:40 +02:00
codec-socks [maven-release-plugin] prepare for next development iteration 2015-03-31 22:06:30 -04:00
common Fix possible IllegalStateException caused by closeNotifyTimeout when using SslHandler 2015-05-06 21:50:09 +02:00
example [#3531] Create SslContext.Builder 2015-04-14 07:27:55 +02:00
handler Fix possible IllegalStateException caused by closeNotifyTimeout when using SslHandler 2015-05-06 21:50:09 +02:00
license Remove license of deque as we not use it anymore 2014-08-04 12:21:33 +02:00
microbench [maven-release-plugin] prepare for next development iteration 2015-03-31 22:06:30 -04:00
tarball [maven-release-plugin] prepare for next development iteration 2015-03-31 22:06:30 -04:00
testsuite Fix race-condition in SocketSslEchoTest 2015-05-06 06:25:15 +02:00
testsuite-osgi [maven-release-plugin] prepare for next development iteration 2015-03-31 22:06:30 -04:00
transport [#3740] Add missing parentheses so the fix works as expected. 2015-05-06 23:02:33 +02:00
transport-native-epoll Fix regression introduced by 08e4b076be. 2015-05-06 17:56:45 +02:00
transport-rxtx [maven-release-plugin] prepare for next development iteration 2015-03-31 22:06:30 -04:00
transport-sctp Add support for SCTP 'unordered' flag. 2015-04-30 08:06:53 +02:00
transport-udt Remove duplicated code in AcceptorChannel classes. 2015-05-07 06:23:59 +02:00
.fbprefs Updated Find Bugs configuration 2009-03-04 10:33:09 +00:00
.gitignore Add JVM crash logs to .gitignore 2014-05-18 21:37:12 +09:00
.travis.yml Travis CI branch whitelisting 2013-03-11 09:55:43 +09:00
CONTRIBUTING.md Move the pull request guide to the developer guide 2014-03-12 13:18:14 +09:00
LICENSE.txt Relicensed to Apache License v2 2009-08-28 07:15:49 +00:00
NOTICE.txt Remove license of deque as we not use it anymore 2014-08-04 12:21:33 +02:00
pom.xml Add more profiles for newer JDK versions 2015-05-04 14:33:56 +09:00
README.md Add a link to the 'native transports' page 2014-07-21 12:54:43 -07:00
run-example.sh Add logLevel property to enable different log levels for the examples. 2014-11-21 10:48:13 +09:00

README.md

Netty Project

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

Links

How to build

For the detailed information about building and developing Netty, please visit the developer guide. This page only gives very basic information.

You require the following to build Netty:

Note that this is build-time requirement. JDK 5 (for 3.x) or 6 (for 4.0+) is enough to run your Netty-based application.

Branches to look

The 'master' branch is where the development of the latest major version lives on. The development of all other major versions takes place in each branch whose name is identical to its major version number. For example, the development of 3.x and 4.x resides in the branch '3' and the branch '4' respectively.