Branch: refs/heads/backport/stable-18.4.x/pr-6852 Home: https://github.com/xwiki/xwiki-platform Commit: c246cec6fd90f233c5f4f7555f97402dd2ea75ab https://github.com/xwiki/xwiki-platform/commit/c246cec6fd90f233c5f4f7555f974... Author: Michael Hamann <[email protected]> Date: 2026-10-15 (Thu, 15 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/pom.xml A xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/main/java/org/xwiki/container/servlet/filters/internal/SafeHeaderValueFilter.java A xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/test/java/org/xwiki/container/servlet/internal/SafeHeaderValueFilterTest.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/WEB-INF/web.xml Log Message: ----------- XWIKI-25283: Replace line breaks in HTTP response header values (#6852) * Add SafeHeaderValueFilter, which wraps the response to replace line breaks by spaces in the values passed to setHeader and addHeader, like servlet containers already do over HTTP/1.1 but not over HTTP/2. * Map it to all requests in web.xml, next to SafeRedirectFilter. * Add a unit test and raise the coverage threshold of xwiki-platform-container-servlet. Co-authored-by: Claude Opus 5.5 <[email protected]> (cherry picked from commit 9396a30354fe76d4072ca7de62e663a9ff7d8878) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications