Axel Uhl
2920ba7563
Merge branch 'main' into bug6105
2025-05-14 21:03:32 +02:00
Axel Uhl
3f6d268512
fixed reporting of client IP from X-Forwarded-For header
2025-05-14 14:01:04 +02:00
Axel Uhl
aeac9266b2
bug6105: started by adding TakedownNoticeRequestContext and corresponding i18n handling
2025-04-24 18:40:31 +02:00
Axel Uhl
715a4905f1
bug6099: the space in X-Forwarded-For isn't even necessary
2025-03-19 10:35:40 +01:00
Axel Uhl
b3378031b4
bug6099: fixed parsing of X-Forwarded-For header (,-separated)
2025-03-19 10:32:15 +01:00
Axel Uhl
c754223f02
bug6099: use only client IP for bearer token-based authentication blocking;
...
client IP is determined from *last* element of X-Forwarded-For which the
AWS ALB will append by default, defaulting to the HttpServletRequest's
getRemoteAddr().
2025-03-18 18:23:52 +01:00
Axel Uhl
fc87c080a1
bug6099: completed an implementation for bearer token authentication request throttling
2025-03-18 15:36:46 +01:00
Axel Uhl
eb1b88f4f5
bug6099: added writing persistence and replication for LockingAndBanning
2025-03-17 17:45:11 +01:00
Axel Uhl
5623c7161a
bug6101: always allow frame-ancestors 'self' to avoid issues with form submission and file upload
2025-03-14 17:48:54 +01:00
Axel Uhl
93b5af3e57
bug6101: use CORS filter origins also for Content-Security-Policy (CSP) frame-ancestors
2025-03-13 16:32:25 +01:00
Axel Uhl
62139edbce
bug6101: consolidate CORS filters and factor out common CORS header handling;
...
use CORSHeader instead of response filter in com.sap.sailing.server.gateway
consistently across Jersey and non-Jersey servlets provided by the bundle;
as drive-by improvement, fix the sap.ico/sap-whitelabeled.ico paths in the page
header of /index.html and provide an empty sap-whitelabeled.ico file.
2025-03-13 01:20:50 +01:00
Axel Uhl
5788d5f199
Merge remote-tracking branch 'github/bug6101' into bug6101
2025-03-12 09:45:35 +01:00
Axel Uhl
4a9239d298
bug6101: more tests
2025-03-12 09:45:25 +01:00
Axel Uhl
e4df56ae17
bug6101: added missing null check for origin
2025-03-11 20:10:08 +01:00
Axel Uhl
beee1721ea
bug6101: first steps towards a configurable CORSFilter
2025-03-11 18:34:26 +01:00
Axel Uhl
a0e96d4612
aftermath to ee3b0f41d1: fixed double precision for pairing list variance/stddev
2025-01-14 18:48:11 +01:00
Axel Uhl
ee3b0f41d1
avoid unnecessary use of double Math.pow when squaring int values
2025-01-14 15:08:56 +01:00
Axel Uhl
8044fee27b
secured DocumentBuilderFactory against XML External Entity (XXE) attacks
2025-01-14 14:32:09 +01:00
Axel Uhl
70eeb3c213
avoid NPE in ThreadPoolUtilImpl.getSubjectOrNull()
2024-11-19 11:49:10 +01:00
Axel Uhl
2eb452c2ce
bug6062: DFS issue solved; cycles are now detected properly
2024-10-20 14:01:14 +02:00
Axel Uhl
cf98233b3a
simplifying graph for topological sorting for match-race tie break
2024-10-19 11:43:30 +02:00
Axel Uhl
a5bd81314c
bug5503: using a servlet filter instead of a response filter for security
2024-06-28 00:22:28 +02:00
Axel Uhl
37f9079b83
bug5955: in CompositeCPUMetrics use separate CPUMeter instance and delegate to it
2024-02-02 01:08:14 +01:00
Axel Uhl
a5088cc64f
bug5955: use composite CPU meter for FlexibleLeaderboard; otherwise, use Regatta as CPUMeter host
2024-02-01 17:19:19 +01:00
Axel Uhl
528209f559
bug5955: integrated CPU metering with TrackedRegatta
2024-02-01 16:36:15 +01:00
Axel Uhl
97c0dc0c1f
bug5955: separate interfaces for CPUMeter read/write
2024-02-01 13:16:01 +01:00
Axel Uhl
fe31842815
bug5955: a first tentative integration of CPUMeter with Leaderboard; REST API
2024-02-01 10:55:51 +01:00
Axel Uhl
0b13e1f570
fixed formatting of log output
2024-01-25 10:59:51 +01:00
Axel Uhl
44c3b1883c
fixed typo in comment
2023-12-18 13:22:30 +01:00
Wessels, Udo (PPN)
2b66121265
bug5910: remove not supported line in .project files so that current Eclipse version (2023-09) can import the projects.
2023-10-09 18:00:50 +02:00
Axel Uhl
7e81b31502
bug5899: factored single-alculation cache into class of its own
2023-08-29 13:57:40 +02:00
Axel Uhl
257c749253
adjusted logging of initial load size (MB reported now)
2023-08-09 12:36:51 +02:00
Udo Wessels
48b07ec2f9
bug5773: Revert email toggle read from system properties and implemented the (standard) lookup of mail.enable property from mail.properties.
2023-08-07 14:28:48 +02:00
Udo Wessels
1fa15ca3bf
bug5773: fixed now the update of the user model and user details view if email validation status was set back.
...
- Introduced a new (optional) system parameter to disable email sending. This is good for local execution. No error occurs any more and email content is visible in the log.
2023-08-07 12:44:15 +02:00
Axel Uhl
36d287e7a2
bug5730: fixed regexp in ResourceBundleStringMessagesImpl to handle multi-line messages with placeholders properly
2023-03-01 00:39:55 +01:00
Axel Uhl
4bec4cba68
bug5730: failing test case for resource bundle placeholder replacement in multi-line strings
2023-03-01 00:30:03 +01:00
Axel Uhl
ac10c1db38
bug5730: preparing for sending mail to server owner about significant landscape events
2023-02-28 13:16:15 +01:00
Axel Uhl
d2f9a50081
added dimension and statistic for user preferences
2023-02-24 17:54:43 +01:00
Axel Uhl
dcca301839
bug5816: first compilable version with a common object-to-base64 (de-)serializer
2023-02-17 15:04:10 +01:00
Axel Uhl
41347437a1
fixed SEVERE bug: when content type was null, charset detection would cause an NPE
2023-01-10 13:10:22 +01:00
Axel Uhl
141af431f6
bug5627: introduced IPAddressUtil plus test to shorten replica look-up
2023-01-03 18:07:52 +01:00
Axel Uhl
69edfe2bb8
bug5797: fixed more occasions where Charset could be null
2022-12-29 17:03:36 +01:00
Axel Uhl
af8d9530d6
bug5797: also handle null Charset for FileItem decoding
2022-12-29 14:32:52 +01:00
Axel Uhl
67e3db3595
bug5797: fixed Charset retrieval: content type may have null Charset
2022-12-29 14:23:57 +01:00
Axel Uhl
f5cb20ec0a
bug5797: refactored wind importers and track importers
2022-12-29 13:11:44 +01:00
Axel Uhl
f94e5a0791
bug5797: interims commit, passing Charset to InputStream constructor where possible
2022-12-22 18:55:19 +01:00
Axel Uhl
562e3a8a47
in EnumMapUtil try first to do a regular class resolution, only then resort to Thread's context class loader;
...
tests had failed with a ClassCastException which was probably due to the
use of a different class loader; using standard resolution first is more
conservative now, and the thread context class loader then works only as
a last resort
2022-12-22 16:58:25 +01:00
Axel Uhl
7d4da6e4b6
use current thread's context class loader for EnumMap de-serialization
2022-12-22 16:11:03 +01:00
Axel Uhl
726ddf43f9
added EnumMapUtil to determine the key type also from an empty EnumMap
2022-12-22 09:36:36 +01:00
Axel Uhl
3f3dff9705
bug5715: refactored for performance; getCompetitorsFromBestToWorst now returns Iterable, not List
2022-12-05 16:17:46 +01:00
Axel Uhl
Wessels, Udo (PPN)
Udo Wessels