c2bb354675
Merged PR 1480: [2.1] HttpSys path normalization
...
This takes PathNormalizer from Kestrel to normalize the request path and prevent traversals. (e.g. "/./" and "/../").
In 2.1 only HttpSys was affected. In 2.2 HttpSys and IIS-in-proc will share this code (with additional tests). In 3.0 we'll refactor it to use more shared source across all three servers.
2019-06-07 21:20:28 +00:00
6ab3df58af
Update branding to 2.1.12 ( #10865 )
2019-06-04 16:58:12 -07:00
476be1182f
Merge in 'release/2.1' changes
2019-04-16 16:14:24 +00:00
2657cb87b6
[2.1] Include Identity UI in the 2.1.11 patch
2019-04-16 09:13:00 -07:00
fafae36461
Merge changes from 'release/2.1'
2019-04-15 17:02:10 -07:00
836964a653
Don't log action and page handler arguments above Trace level ( #9227 )
2019-04-15 13:29:07 -07:00
182c48f0b0
Merged PR 891: Update MessagePack dependency
...
Update MessagePack dependency
Related work items: #142
2019-04-12 17:40:48 +00:00
c53bd798c4
Update branding to 2.1.11
...
- no ArchiveBaseline.*.txt additions necessary
2019-04-10 08:59:44 -07:00
e497f4101f
Update branding to 2.1.10 ( #8265 )
2019-03-06 19:45:46 -08:00
5bb5bafbed
Update branding to 2.1.9
2019-02-12 19:12:20 -08:00
87af0c3f1f
Update Google Auth UserInfo endpoint ( #6338 )
...
* Update Google Auth UserInfo endpoint #6069
* Add Google to PatchConfig
2019-01-14 12:28:25 -08:00
a06b0e3968
Prep for 2.1.8 Patch ( #6632 )
2019-01-11 16:57:45 -08:00
e1d8a986c1
Merge in 'release/2.1' changes
2018-12-13 22:36:04 +00:00
96ea326664
Document custom reference resolution ( #4806 )
2018-12-13 14:35:02 -08:00
2720c28047
Prepare to patch WebSockets
2018-11-29 10:39:29 -08:00
a36db52f9e
Add Kestrel.Core to patchconfig
2018-11-27 10:17:37 -08:00
59ed8df382
Add targets and tools for ensuring consistent package versions between servicing builds
2018-11-09 13:05:31 -08:00
Chris Ross (ASP.NET)
Nate McMaster
dotnet-bot
Javier Calvarro Nelson
Pranav K
Brennan Conroy
Doug Bunting
Doug Bunting
Chris Ross
Mikael Mengistu
Nate McMaster