Branch: refs/heads/stable-18.9.x Home: https://github.com/xwiki/xwiki-platform Commit: 2164c558cdfa5c1b77aa76f6c76ccb37b40ec090 https://github.com/xwiki/xwiki-platform/commit/2164c558cdfa5c1b77aa76f6c76cc... Author: Michael Hamann <[email protected]> Date: 2026-10-15 (Thu, 15 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/pom.xml A xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/main/java/org/xwiki/container/servlet/filters/internal/SafeHeaderValueFilter.java A xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/test/java/org/xwiki/container/servlet/internal/SafeHeaderValueFilterTest.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/WEB-INF/web.xml Log Message: ----------- XWIKI-25283: Replace line breaks in HTTP response header values (#6852) * Add SafeHeaderValueFilter, which wraps the response to replace line breaks by spaces in the values passed to setHeader and addHeader, like servlet containers already do over HTTP/1.1 but not over HTTP/2. * Map it to all requests in web.xml, next to SafeRedirectFilter. * Add a unit test and raise the coverage threshold of xwiki-platform-container-servlet. Co-authored-by: Claude Opus 5.5 <[email protected]> (cherry picked from commit 9396a30354fe76d4072ca7de62e663a9ff7d8878) Commit: 6cf45ba54a69b3f27f0e86ce9106d87c3c4e9aef https://github.com/xwiki/xwiki-platform/commit/6cf45ba54a69b3f27f0e86ce9106d... Author: Michael Hamann <[email protected]> Date: 2026-10-15 (Thu, 15 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/main/java/org/xwiki/container/servlet/filters/internal/SafeHeaderValueFilter.java Log Message: ----------- XWIKI-25283: Replace line breaks in HTTP response header values * Fix the `@since` versions: the change missed the 18.4.7 and 17.10.14 releases. Co-Authored-By: Claude Opus 5.5 <[email protected]> Compare: https://github.com/xwiki/xwiki-platform/compare/590fe44174c2...6cf45ba54a69 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications