Special Thanks to the following Eclipse Jetty community members
- @adityaanikam (Aditya Nikam)
Changelog
- #15875 - [12.0.x] Introduced recursion depth limit in JSON parsing.
- #15871 - SessionHandler uses ConnectionMetaData.isSecure() instead of Request.isSecure(), breaking secure session cookies behind ForwardedRequestCustomizer (@adityaanikam)
- #15869 -
PathResourceincorrectly treats a classpath resource inside a JAR under a non-ASCII path as an alias - #15807 - ArrayByteBufferPool.clear() leaves the bucket's secondary QueuedPool poisoned: NPE on the next acquire()
- #15678 - CompressionHandler randomly truncates output
- #15386 - Issues in http2 stream idle timeouts
- #15368 - HTTP/2 client aborts exchange and loses response completed during server graceful shutdown (regression in 12.1.10 / 12.0.36 from #15134 / #14692)