Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: ec5099cda5ce162c4d348d641d80fd09058bdc3a https://github.com/xwiki/xwiki-platform/commit/ec5099cda5ce162c4d348d641d80f... Author: Michael Hamann <[email protected]> Date: 2026-10-15 (Thu, 15 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/pom.xml A xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/main/java/org/xwiki/container/servlet/filters/internal/SafeHeaderValueFilter.java A xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/test/java/org/xwiki/container/servlet/internal/SafeHeaderValueFilterTest.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/WEB-INF/web.xml Log Message: ----------- XWIKI-25283: Replace line breaks in HTTP response header values (#6852) * Add SafeHeaderValueFilter, which wraps the response to replace line breaks by spaces in the values passed to setHeader and addHeader, like servlet containers already do over HTTP/1.1 but not over HTTP/2. * Map it to all requests in web.xml, next to SafeRedirectFilter. * Add a unit test and raise the coverage threshold of xwiki-platform-container-servlet. Co-authored-by: Claude Opus 5.5 <[email protected]> (cherry picked from commit 9396a30354fe76d4072ca7de62e663a9ff7d8878) Commit: ca4e3dedc1b1e49a95f375d4cdee109b0dc1f256 https://github.com/xwiki/xwiki-platform/commit/ca4e3dedc1b1e49a95f375d4cdee1... Author: Michael Hamann <[email protected]> Date: 2026-10-15 (Thu, 15 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-container/xwiki-platform-container-servlet/src/main/java/org/xwiki/container/servlet/filters/internal/SafeHeaderValueFilter.java Log Message: ----------- XWIKI-25283: Replace line breaks in HTTP response header values * Fix the `@since` versions: the change missed the 18.4.7 and 17.10.14 releases. Co-Authored-By: Claude Opus 5.5 <[email protected]> Compare: https://github.com/xwiki/xwiki-platform/compare/3d8f9fc12324...ca4e3dedc1b1 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications