Skip to content

fix: prevent denial of service submitting form-url-encoded payload#12410

Merged
sdelamo merged 1 commit into
4.10.xfrom
dos-form-url-encoded
Feb 25, 2026
Merged

fix: prevent denial of service submitting form-url-encoded payload#12410
sdelamo merged 1 commit into
4.10.xfrom
dos-form-url-encoded

Conversation

@sdelamo

@sdelamo sdelamo commented Feb 25, 2026

Copy link
Copy Markdown
Member

No description provided.

@sdelamo sdelamo requested a review from yawkat February 25, 2026 09:14
@sdelamo sdelamo added the type: bug Something isn't working label Feb 25, 2026
@sonarqubecloud

Copy link
Copy Markdown

@sdelamo sdelamo marked this pull request as ready for review February 25, 2026 10:15
@sdelamo sdelamo merged commit 1afe509 into 4.10.x Feb 25, 2026
23 of 25 checks passed
@sdelamo sdelamo deleted the dos-form-url-encoded branch February 25, 2026 10:15
sdelamo added a commit that referenced this pull request Feb 26, 2026
sdelamo added a commit that referenced this pull request Feb 26, 2026
…12411)

* fix: prevent denial of service submitting form-url-encoded payload

cherry pick #12410 for Micronaut 3

* ci: update to github actions v4

* actions/setup-java@v4

* ignore SslRefreshSpec

* use commonhaus micronaut website is down

* use gradle/action/setup-gradle

As of v3 this action has been superceded by gradle/actions/setup-gradle. Any workflow that uses gradle/gradle-build-action@v3 will transparently delegate to gradle/actions/setup-gradle@v3.

Users are encouraged to update their workflows, replacing:

uses: gradle/gradle-build-action@v3
with

uses: gradle/actions/setup-gradle@v3
See the setup-gradle documentation for up-to-date documentation for gradle/actions/setup-gradle.

* use gradle/actions/wrapper-validation

As of v3 this action has been superceded by gradle/actions/wrapper-validation. Any workflow that uses gradle/wrapper-validation-action@v3 will transparently delegate to gradle/actions/wrapper-validation@v3.

Users are encouraged to update their workflows, replacing:

uses: gradle/wrapper-validation-action@v3
with

uses: gradle/actions/wrapper-validation@v3
See the wrapper-validation documentation for up-to-date documentation for gradle/actions/wrapper-validation.

* upload binary compatibility results only if java 17
sdelamo added a commit that referenced this pull request Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: bug Something isn't working

Projects

No open projects
Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants