12.0.19

Special Thanks to the following Eclipse Jetty community members

• @lijinliangyihao (lijinliang)
• @SentryMan (Josiah Noel)

Changelog

• #12944 - Avoid direct cast to ServletScopedContext
• #12943 - Unable to handle - IllegalStateException in Jetty Client Request send()
• #12942 - Backport tracking pool improvements from 12.1.x
• #12936 - UnsupportedOperationException when modifying HttpServletResponse after commit
• #12929 - jetty-http-spi Fix Multi-Value Response Headers (@SentryMan)
• #12926 - maxFormContentSize doesn't count "=" characters
• #12925 - Fix to EE8/EE9 StandardDescriptorProcessor to allow duplicate ServletMappings
• #12923 - Introduce Bouncy Castle Jetty module
• #12916 - Bad example in JavaDoc of InputStreamResponseListener
• #12913 - Resource located inside JAR file is wrongfully treated as an alias
• #12906 - URIUtil#correctURI throws StringIndexOutOfBoundsException
• #12905 - Fix SSL buffer leak
• #12900 - Make JPMS work with new Environments features
• #12893 - Fix config for jspc plugin for eeX jsp demos
• #12815 - Update jetty-acceptratelimit.xml
• #12537 - org.eclipse.jetty.server.LowResourceMonitor#setMonitorThreads seems not right (@lijinliangyihao)
• #12361 - ErrorHandler#getShowMessageInTitle() is ignored
• #12205 - Improve the documentation for the Jetty Server Dump

12.0.18

Changelog

• #12892 - Module http-forwarded does not appear to be able to use the IP in X-Forwarded-For header with any TLS HTTP request if the module http2 is also loaded
• #12888 - ErrorPageHandler dispatcher returns incorrect 405 for failing POST requests (e.g. JAX-RS)
• #12882 - Regression: HttpConfiguration setResponseHeaderSize is ineffective in 12.0.17
• #12871 - Add module ee8-cdi-decorate or update ee10-cdi-decorate to allow run old web applications
• #12802 - Make Server::setDefaultHandler and Server::setErrorHandler arguments consistent

11.0.25

This is a sponsored release for an End of Life version of Jetty.

Changelog

• #12874 - Introduce UriCompliance.USER_INFO to Jetty 10.0.x
• #12869 - XmlConfiguration shouldn't treat non-XML command line options as XML
• #12776 - ByteBufferPool - all ongoing requests fail when single request is cancelled on HTTP/2
• #12821 - Better document ContextHandler.setCompactPath(boolean) deprecation
• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE

10.0.25

This is a sponsored release for an End of Life version of Jetty.

Changelog

• #12874 - Introduce UriCompliance.USER_INFO to Jetty 10.0.x
• #12869 - XmlConfiguration shouldn't treat non-XML command line options as XML
• #12776 - ByteBufferPool - all ongoing requests fail when single request is cancelled on HTTP/2
• #12821 - Better document ContextHandler.setCompactPath(boolean) deprecation
• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE

12.0.17

Special Thanks to the following Eclipse Jetty community members for this release

• @SentryMan (Josiah Noel)
• @karstenhusberg
• @lucarota
• @lucarota-eutelsat (Luca Rota)

Of Special Note

The definition of UriCompliance.LEGACY has changed with regards to bad UTF-8 parsing. (This now conforms to Jetty 11/10/9 LEGACY mode behavior.)
A new UriCompliance.JETTY_11 has been created to replicate Jetty 11 DEFAULT mode.

Changelog

• #12834 - Quotes should be escaped in request logs
• #12831 - Always resolve pathSpec with asPathSpec in ConstraintSecurityHandler
• #12828 - HttpServletResponse.encodeURL() does not support relative paths
• #12827 - Introduce UriCompliance.JETTY_11 which is different than UriCompliance.LEGACY
• #12821 - Restore ee9/ee8 ContextHandler.setCompactPath(boolean) behavior for backward compat reasons
• #12810 - Add jetty-ee to a BOM
• #12796 - Do not decode path in EE9 Dispatcher
• #12792 - Issue when scrolling around in embedded videos
• #12791 - Review UriCompliance.LEGACY behavior with bad UTF-8 in query
• #12790 - Cannot invoke "org.eclipse.jetty.io.RetainableByteBuffer.getByteBuffer()" because "buffer" is null
• #12775 - EE9 Servlet API throws exceptions in normal control flow
• #12768 - Static HTML in demos still refer to Jetty 10/11 and earlier concepts.
• #12764 - Add filter support to jetty-http-spi (@SentryMan)
• #12752 - Make jetty-server a compile scoped dependency of jetty-http-spi (@SentryMan)
• #12750 - UriCompliance is ignored for query string parsing
• #12741 - Remove unused files from jetty-eeX-demo-jetty-webapp
• #12739 - Regression in handing CombinedResource WEB-INF between Jetty 11 and Jetty 12
• #12730 - RegexRule needs configurable to include query (or not) in match logic
• #12725 - Update the _matchAfterIndex variable after setting new filter mappings
• #12724 - Fix SymlinkAllowedResourceAliasChecker for use with CombinedResource
• #12723 - Only on Windows: Failed startup of osgi context oeje8w.WebAppContext
• #12714 - MongoSessionDataStore can't upsert sessions if workerName contains token deliminators
• #12706 - Export ArrayByteBufferPool statistics via JMX
• #12705 - Orphaned sessions are never deleted at runtime in the SessionDataStore.
• #12690 - Add configurable capping for values of H2 MAX_HEADER_LIST_SIZE settings frames
• #12689 - Add statistics about ByteBufferPool.acquire() calls made for which there is no bucket
• #12683 - Cross context dispatch to root context uses incorrect target path
• #12681 - CachingHttpContentFactory$CachedHttpContent already released buffer
• #12671 - Check UriCompliance.Violation.ALLOW_BAD_UTF8 in query parameter extraction
• #12670 - Improve buffer management of HTTP/1 response headers
• #12652 - Jetty Reactive client hangs for HTTP 401 responses.
• #12650 - Attribute org.eclipse.jetty.multipartConfig is null
• #12646 - CompleteListener may be invoked twice
• #12639 - Request.Content.getContentType()'s Javadoc contradicts HttpConnection.normalizeRequest()
• #12634 - Update jaas index.adoc (@karstenhusberg)
• #12633 - Ensure a redirect of the HttpServletResponse will close HttpOutput
• #12626 - Wrong ? packages in the JNDI mail example (@karstenhusberg)
• #12609 - Change of behaviour with HttpServletResponse.sendError(0) in EE10
• #12428 - No ALPNProcessor for org.bouncycastle.jsse.provider.ProvSSLEngine error with jetty http2 client (@lucarota-eutelsat, @lucarota)

9.4.57.v20241219

This is a sponsored release for an End of Life version of Jetty.

Changelog

• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE
• #12648 - Backport improved handling of bad Gzip content (and Gzip Exceptions)
• #12532 - Backport of deprecation of UserInfo on URI (in violation of RFC2616 spec)

12.1.0.alpha1

• #12612 - Use Compression classes for client decoding
• #12611 - Supporting Compression discovery with ServiceLoader.
• #12593 - Create start.d/*.ini for [ini-template] modules
• #12564 - Enhance HTTP Compliance CRLF modes
• #12553 - Execute immediately HTTP/2 failures
• #12547 - Improve module deprecation
• #12546 - Added documentation for DoSHandler.
• #12534 - Jetty 12.1.x ee9 ee10 ee11 default servlet test resource servlet test
• #12531 - Reworking jetty-compression for JPMS
• #12529 - Undisable ee9 BlockingTest and fix HttpChannel.produceContent
• #12505 - ErrorPageErrorHandler does not use the proper attributes for error handling
• #12502 - Undisable WebAppContextTest.testGetResourcePaths
• #12486 - Undisable and fix PartialRFC2616Test
• #12436 - Allow headers size extend to maxRequestHeadersSize in http client (@shaoxt)
• #12324 - Response compression does not work when the Accept-Encoding: * request header is used.
• #12266 - InvocationType improvements and cleanups
• #12106 - Document protected and hidden classes
• #11947 - Jetty12: HttpConfiguration#_relativeRedirectAllowed flipped to true per default
• #11579 - Introduce UriCompliance.Violation.FRAGMENT to reject HTTP Request Line that includes fragment section.
• #11307 - Explicit demand control in WebSocket endpoints with only onWebSocketFrame()
• #9051 - Review Jetty-12 DelayedHandler
• #5308 - Extract httpConfig and scheduler configuration out of jetty.xml
• #3377 - Improve jetty-ssl-context.xml

12.0.16

Special Thanks to the following Eclipse Jetty community members

• @arsenalzp (Oleksandr Krutko)

Changelog

• #12603 - ee9 / UnsupportedOperationException: Read Only
• #12579 - restore abort for SendCallback.failed
• #12578 - HttpServletRequest.getParameterMap - UnmodifiableMap does not wrap a jetty MultiMap
• #12577 - org.eclipse.jetty.http.HttpURI.getDecodedPath() throws an NPE when there is no path
• #12554 - Improve documentation for ambiguous URIs
• #12553 - Execute immediately HTTP/2 failures
• #12520 - Numerous stack traces logged at warning level when running under HTTP/2
• #12488 - HTTP/2 headers may not be split in CONTINUATION frames
• #12482 - CustomRequestLog %q inconsistency with a doc
• #12481 - Exception when a Content-Length is set on a 304 response
• #12469 - Content.Sink.write(sink, last, utf8Content, callback) could become faster
• #12429 - HandshakeRequest getHeaders are case sensitive.
• #12323 - AsyncMiddleManServlet response flushing
• #12272 - Potential deadlock with Vaadin
• #12153 - Failed to serve resource java.lang.IllegalStateException: s=HANDLING rs=ASYNC os=OPEN is=IDLE awp=false se=false i=true al=0
• #11413 - Conscrypt does not support server-side SNI
• #9529 - Expose TCP connection establishment information (@arsenalzp)

12.0.15

Changelog

• #12431 - Typo in org.eclipse.jetty.server.FormFields.from(Request, Charset)
• #12404 - Parsing URI with HttpUri.from(String uri) throws "IllegalArgumentException: Bad authority" when path is empty
• #12397 - .tgz files are double-gzipped
• #12356 - RuntimeIOException: Parser is terminated when doing lots of requests with Connection: Keep-Alive
• #12348 - HttpClientTransportDynamic does not initialize low-level clients
• #12341 - QPack encoder must not send any encoder instructions when SETTINGS_QPACK_MAX_TABLE_CAPACITY is 0
• #12313 - Jetty 12 ee9/ee10 doesn't invoke callbacks when h2 client sends RST_STREAM
• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE
• #11749 - InvalidArgumentExceptions due to invalid status codes are not handled properly
• #11492 - Auto add AliasChecker for custom Base Resource in DefaultServlet
• #9980 - Add format option to CustomRequestLog for request authority and request authority scheme
• #5888 - Limit usage of HTTP/2 connections
• #5685 - AsyncProxyServlet calls onProxyResponseSuccess() when internally it throws "Response header too large" exception

12.1.0.alpha0

Changelog

• #12404 - Parsing URI with HttpUri.from(String uri) throws "IllegalArgumentException: Bad authority" when path is empty
• #12397 - .tgz files are double-gzipped
• #12378 - Change default value for SslContextFactory.renegotiationAllowed to false
• #12356 - RuntimeIOException: Parser is terminated when doing lots of requests with Connection: Keep-Alive
• #12350 - LdapLoginModule support for Jetty Password obfuscation
• #12348 - HttpClientTransportDynamic does not initialize low-level clients
• #12341 - QPack encoder must not send any encoder instructions when SETTINGS_QPACK_MAX_TABLE_CAPACITY is 0
• #12339 - Default session configuration parameter flushOnResponseCommit to true rather than false
• #12318 - SecurityUtils should not elminate calls to existing methods
• #12313 - Jetty 12 ee9/ee10 doesn't invoke callbacks when h2 client sends RST_STREAM
• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE
• #12082 - RetainableByteBuffer.DynamicCapacity enters a corrupt state when released
• #12023 - [12.1.x] Remove deprecated classes/methods
• #11956 - Consider re-introducing ByteBufferPool.NON_POOLING constant
• #11815 - Servlet spec 6.1 issue 300
• #11749 - InvalidArgumentExceptions due to invalid status codes are not handled properly
• #11741 - Review case of MimeType.Type charsets
• #11560 - Implement Web3 OAuth/Sign-In Functionality
• #11514 - Start properties jetty.webapp.addServerClasses and jetty.webapp.addSystemClasses are not applied during ee8/ee9 deployments
• #11492 - Auto add AliasChecker for custom Base Resource in DefaultServlet
• #11358 - Jetty Websocket should have some API to handle timeouts
• #9980 - Add format option to CustomRequestLog for request authority and request authority scheme
• #9778 - Jetty 12 - Remove WriteFlusher.Listener
• #8790 - Jetty-12 HttpContent should have an async API
• #8769 - Introduce new Compression Handler with support for gzip, brotli, and zstandard
• #6328 - High CPU usage of method handle invocations in Jetty 10
• #5888 - Limit usage of HTTP/2 connections
• #5685 - AsyncProxyServlet calls onProxyResponseSuccess() when internally it throws "Response header too large" exception
• #842 - Implement RFC7239 support in Proxy and Middleman