[KNOX-2221] Upgrade shiro to 1.5.3 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Sub-task
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.5.0
Component/s: None
Labels:
None

Description

Note: Can't upgrade to shiro 1.5.0 due to a bug in handling `/` only from ~~SHIRO-682~~. Will need to wait for a new version of Shiro to upgrade.

Upgrade shiro 1.4.2 to 1.5.3

Shiro 1.5.0 release notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12344991

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

log.txt.gz
01/Feb/20 21:12
90 kB
Kevin Risden

Issue Links

relates to

SHIRO-530 INI parser does not properly handled backslashes at end of values

Resolved

SHIRO-682 fix the potential threat when use "uri = uri + '/' " to bypassed shiro protect

Resolved

SHIRO-684 INI parser keeps escape characters in keys and values

Resolved

links to

GitHub Pull Request #271

GitHub Pull Request #360

Activity

People

Assignee:: Kevin Risden

Reporter:: Kevin Risden

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Dates

Created:: 01/Feb/20 20:21

Updated:: 13/Jul/20 14:33

Resolved:: 13/Jul/20 14:33

Time Tracking

Estimated:

Not Specified

Remaining:

0h

Logged:

50m