434735fbf6
Disable by default external entity resolution when using Spring OXM
with jaxb. This prevents a XML entity from being able to resolve a
local file on the host system.
See:
https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing
Issue: SPR-10806
(cherry picked from commit
|
||
|---|---|---|
| .settings/gradle | ||
| buildSrc/src/main | ||
| gradle | ||
| spring-aop/src | ||
| spring-aspects | ||
| spring-beans/src | ||
| spring-context | ||
| spring-context-support/src | ||
| spring-core/src | ||
| spring-expression | ||
| spring-instrument/src | ||
| spring-instrument-tomcat/src | ||
| spring-jdbc/src | ||
| spring-jms/src | ||
| spring-orm/src | ||
| spring-orm-hibernate4/src | ||
| spring-oxm | ||
| spring-struts/src | ||
| spring-test | ||
| spring-test-mvc/src | ||
| spring-tx/src | ||
| spring-web/src | ||
| spring-webmvc/src | ||
| spring-webmvc-portlet/src | ||
| spring-webmvc-tiles3/src | ||
| src | ||
| .gitignore | ||
| CONTRIBUTING.md | ||
| README.md | ||
| build.gradle | ||
| gradle.properties | ||
| gradlew | ||
| gradlew.bat | ||
| import-into-eclipse.bat | ||
| import-into-eclipse.sh | ||
| import-into-idea.md | ||
| settings.gradle | ||
README.md
Spring Framework
The Spring Framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. A key element of Spring is infrastructural support at the application level: Spring focuses on the "plumbing" of enterprise applications so that teams can focus on application-level business logic, without unnecessary ties to specific deployment environments.
The framework also serves as the foundation for Spring Integration, Spring Batch and the rest of the Spring family of projects. Browse the repositories under the SpringSource organization on GitHub for a full list.
.NET and Python variants are available as well.
Downloading artifacts
See downloading Spring artifacts for Maven repository information. Unable to use Maven or other transitive dependency management tools? See building a distribution with dependencies.
Documentation
See the current Javadoc and reference docs.
Getting support
Check out the Spring forums and the spring and spring-mvc tags on Stack Overflow. Commercial support is available too.
Issue Tracking
Report issues via the Spring Framework JIRA. Understand our issue management process by reading about the lifecycle of an issue. Think you've found a bug? Please consider submitting a reproduction project via the spring-framework-issues GitHub repository. The readme there provides simple step-by-step instructions.
Building from source
The Spring Framework uses a Gradle-based build system. In the instructions
below, ./gradlew is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build. The only
prerequisites are Git and JDK 1.7+.
check out sources
git clone git://github.com/SpringSource/spring-framework.git
compile and test, build all jars, distribution zips and docs
./gradlew build
install all spring-* jars into your local Maven cache
./gradlew install
import sources into your IDE
Run ./import-into-eclipse.sh or read import-into-idea.md as appropriate.
... and discover more commands with ./gradlew tasks. See also the Gradle
build and release FAQ.
Contributing
Pull requests are welcome; see the contributor guidelines for details.
Staying in touch
Follow @springframework and its team members on Twitter. In-depth articles can be found at the SpringSource team blog, and releases are announced via our news feed.
License
The Spring Framework is released under version 2.0 of the Apache License.