Special Thanks to the following Eclipse Jetty community members

• @scrat98 (Artem Golovko)
• @kohlschuetter (Christian Kohlschütter)
• @lijinliangyihao (lijinliang)

Changelog

• #13121 - Deploy Dump & cleanup
• #13104 - Change DeploymentScanner monitoredDir names to webappsDir
• #13101 - Implement rejection RFC9110 Bad White Space
• #13095 - Common RFC tests
• #13090 - Replace RuntimeIOException with UncheckedIOException
• #13084 - Documented the new web application deployer.
• #13078 - Remove deprecated jetty-runner
• #13069 - Deploy Environment Weights
• #13064 - Jetty 12.0.x/12.1.x: ShutdownMonitorTest is stuck
• #13051 - Jetty 12.1.x build stuck because of waiting on the Class initialization monitor for org.eclipse.jetty.io.RetainableByteBuffer$Abstract
• #13048 - Exception from oeje11wjt.JakartaClientClassLoaderTest#websocketProvidedByServer
• #13046 - Restore ee9 (and ee8) behaviors with parsing application/x-www-form-urlencoded parameters
• #13040 - Introduce Deploy property baseResource for use in 12.1.x deploy
• #13031 - SessionHandlerTest.testFlushOnResponseCommit is flaky
• #13029 - Web-socket that use permessage-deflate extensions are keeping in memory the last message sent to the client
• #13019 - [util-ajax] Support CharSequence instead of String for JSON.parse (@scrat98)
• #13012 - Refine Deferred Authentication
• #13011 - Review changes in org.eclipse.jetty.server.Deployable in 12.1.x and apply appropriate deprecations and warnings
• #13008 - Introduce HttpClient's Request.onResponseListener()
• #13004 - QueuedThreadPool throws error on quick successive execute calls if initialized with BlockingArrayQueue or ArrayBlockingQueue
• #13003 - Avoid cycles in bean dumps
• #13002 - HugeResourceTest.testUploadDelayed() fails when RetainedContentLoaderFactory's reject is not explicitly disabled
• #13000 - Remove environment XML functionality from deployer
• #12997 - DeploymentScanner should only act on *.xml or *.properties changes in environments/ directory.
• #12995 - Clarify deployment of foo/ and foo.d/
• #12993 - Improve Hot Redeployment Information logging
• #12992 - Deployment Scanner is still performing hot deploy by default, contrary to documentation
• #12990 - Jetty CoreContextHandler needs to support simple static directory deployment
• #12988 - Introduce an HTTP/2 frame listener
• #12985 - Optimize memory usage of FrameFlusher.timeoutExpired
• #12981 - MultiPart annotation scanning not done if metadata-complete==true
• #12965 - Allow Resource instances to provide Content.Source directly
• #12963 - Slow transfers on custom / non-Path Resource instances (@kohlschuetter)
• #12961 - Different results for getRequestURL in filters with async requests
• #12958 - Discrepancy between Jetty 9 and Jetty 12 when setting the base resource to a path containing ..
• #12943 - Unable to handle - IllegalStateException in Jetty Client Request send()
• #12936 - UnsupportedOperationException when modifying HttpServletResponse after commit
• #12926 - maxFormContentSize doesn't count "=" characters
• #12923 - Introduce Bouncy Castle Jetty module
• #12919 - Reduce some OSGi code duplication with core Activator.
• #12918 - NullPointerException with ServeAs requests (with FormAuthenticator)
• #12916 - Bad example in JavaDoc of InputStreamResponseListener
• #12913 - Resource located inside JAR file is wrongfully treated as an alias
• #12900 - Make JPMS work with new Environments features
• #12875 - Fixes for EE11 Jakarta WebSocket implementation to fix TCK failures.
• #12746 - Sporadic NPE in HttpChannelState.onFailure
• #12700 - ResourceHandler & ResourceServlet (all envs) do not agree on UseFileMapping default
• #12697 - Servlet error pages do not work when Response.writeError is called before entering the ServletChannel
• #12537 - org.eclipse.jetty.server.LowResourceMonitor#setMonitorThreads seems not right (@lijinliangyihao)
• #12530 - Make HttpOutput.println() simpler and faster
• #12361 - ErrorHandler#getShowMessageInTitle() is ignored
• #11492 - Auto add AliasChecker for custom Base Resource in DefaultServlet
• #11425 - Review Handler Collection logic around InvocationType
• #11320 - Review callers of HttpChannelState.onIdleTimeout()
• #11289 - Embedded jetty doesn't set the charset to content-type header
• #10608 - DefaultServlet behaviour wrong for welcomeFiles
• #8715 - Jetty 12 - Optimize RequestLog information retrieval
• #5442 - Allow multiple authentication options for a web app

Changelog

• #13088 - Documented Jetty module changes.
• #13085 - Improvements to HTTP/2 session container code.
• #13067 - Fix default fallback Jetty version
• #13064 - Jetty 12.0.x/12.1.x: ShutdownMonitorTest is stuck
• #13046 - Restore ee9 (and ee8) behaviors with parsing application/x-www-form-urlencoded parameters

Special Thanks to the following Eclipse Jetty community members

• @scrat98 (Artem Golovko)
• @kohlschuetter (Christian Kohlschütter)
• @garydgregory (Gary Gregory)

Changelog

• #13033 - Added "since" and "forRemoval" attributes to AbstractLifeCycle.AbstractLifeCycleListener deprecation, and removed its usages.
• #13029 - Web-socket that use permessage-deflate extensions are keeping in memory the last message sent to the client
• #13019 - [util-ajax] Support CharSequence instead of String for JSON.parse (@scrat98)
• #13017 - Upgrade quiche to version 0.24.0
• #13016 - Allow the HttpClient in AbstractProxyServlet to configure additional attributes (@garydgregory)
• #13008 - Introduce HttpClient's Request.onResponseListener()
• #13004 - QueuedThreadPool throws error on quick successive execute calls if initialized with BlockingArrayQueue or ArrayBlockingQueue
• #12988 - Introduce an HTTP/2 frame listener
• #12985 - Optimize memory usage of FrameFlusher.timeoutExpired
• #12981 - MultiPart annotation scanning not done if metadata-complete==true
• #12965 - Allow Resource instances to provide Content.Source directly
• #12963 - Slow transfers on custom / non-Path Resource instances (@kohlschuetter)
• #12961 - Different results for getRequestURL in filters with async requests
• #12958 - Discrepancy between Jetty 9 and Jetty 12 when setting the base resource to a path containing ..
• #12900 - Make JPMS work with new Environments features
• #12746 - Sporadic NPE in HttpChannelState.onFailure

Special Thanks to the following Eclipse Jetty community members

• @lijinliangyihao (lijinliang)
• @SentryMan (Josiah Noel)

Changelog

• #12944 - Avoid direct cast to ServletScopedContext
• #12943 - Unable to handle - IllegalStateException in Jetty Client Request send()
• #12942 - Backport tracking pool improvements from 12.1.x
• #12936 - UnsupportedOperationException when modifying HttpServletResponse after commit
• #12929 - jetty-http-spi Fix Multi-Value Response Headers (@SentryMan)
• #12926 - maxFormContentSize doesn't count "=" characters
• #12925 - Fix to EE8/EE9 StandardDescriptorProcessor to allow duplicate ServletMappings
• #12923 - Introduce Bouncy Castle Jetty module
• #12916 - Bad example in JavaDoc of InputStreamResponseListener
• #12913 - Resource located inside JAR file is wrongfully treated as an alias
• #12906 - URIUtil#correctURI throws StringIndexOutOfBoundsException
• #12905 - Fix SSL buffer leak
• #12900 - Make JPMS work with new Environments features
• #12893 - Fix config for jspc plugin for eeX jsp demos
• #12815 - Update jetty-acceptratelimit.xml
• #12537 - org.eclipse.jetty.server.LowResourceMonitor#setMonitorThreads seems not right (@lijinliangyihao)
• #12361 - ErrorHandler#getShowMessageInTitle() is ignored
• #12205 - Improve the documentation for the Jetty Server Dump

Changelog

• #12892 - Module http-forwarded does not appear to be able to use the IP in X-Forwarded-For header with any TLS HTTP request if the module http2 is also loaded
• #12888 - ErrorPageHandler dispatcher returns incorrect 405 for failing POST requests (e.g. JAX-RS)
• #12882 - Regression: HttpConfiguration setResponseHeaderSize is ineffective in 12.0.17
• #12871 - Add module ee8-cdi-decorate or update ee10-cdi-decorate to allow run old web applications
• #12802 - Make Server::setDefaultHandler and Server::setErrorHandler arguments consistent

This is a sponsored release for an End of Life version of Jetty.

Changelog

• #12874 - Introduce UriCompliance.USER_INFO to Jetty 10.0.x
• #12869 - XmlConfiguration shouldn't treat non-XML command line options as XML
• #12776 - ByteBufferPool - all ongoing requests fail when single request is cancelled on HTTP/2
• #12821 - Better document ContextHandler.setCompactPath(boolean) deprecation
• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE

This is a sponsored release for an End of Life version of Jetty.

Changelog

• #12874 - Introduce UriCompliance.USER_INFO to Jetty 10.0.x
• #12869 - XmlConfiguration shouldn't treat non-XML command line options as XML
• #12776 - ByteBufferPool - all ongoing requests fail when single request is cancelled on HTTP/2
• #12821 - Better document ContextHandler.setCompactPath(boolean) deprecation
• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE

Special Thanks to the following Eclipse Jetty community members for this release

• @SentryMan (Josiah Noel)
• @karstenhusberg
• @lucarota
• @lucarota-eutelsat (Luca Rota)

Of Special Note

The definition of UriCompliance.LEGACY has changed with regards to bad UTF-8 parsing. (This now conforms to Jetty 11/10/9 LEGACY mode behavior.)
A new UriCompliance.JETTY_11 has been created to replicate Jetty 11 DEFAULT mode.

Changelog

• #12834 - Quotes should be escaped in request logs
• #12831 - Always resolve pathSpec with asPathSpec in ConstraintSecurityHandler
• #12828 - HttpServletResponse.encodeURL() does not support relative paths
• #12827 - Introduce UriCompliance.JETTY_11 which is different than UriCompliance.LEGACY
• #12821 - Restore ee9/ee8 ContextHandler.setCompactPath(boolean) behavior for backward compat reasons
• #12810 - Add jetty-ee to a BOM
• #12796 - Do not decode path in EE9 Dispatcher
• #12792 - Issue when scrolling around in embedded videos
• #12791 - Review UriCompliance.LEGACY behavior with bad UTF-8 in query
• #12790 - Cannot invoke "org.eclipse.jetty.io.RetainableByteBuffer.getByteBuffer()" because "buffer" is null
• #12775 - EE9 Servlet API throws exceptions in normal control flow
• #12768 - Static HTML in demos still refer to Jetty 10/11 and earlier concepts.
• #12764 - Add filter support to jetty-http-spi (@SentryMan)
• #12752 - Make jetty-server a compile scoped dependency of jetty-http-spi (@SentryMan)
• #12750 - UriCompliance is ignored for query string parsing
• #12741 - Remove unused files from jetty-eeX-demo-jetty-webapp
• #12739 - Regression in handing CombinedResource WEB-INF between Jetty 11 and Jetty 12
• #12730 - RegexRule needs configurable to include query (or not) in match logic
• #12725 - Update the _matchAfterIndex variable after setting new filter mappings
• #12724 - Fix SymlinkAllowedResourceAliasChecker for use with CombinedResource
• #12723 - Only on Windows: Failed startup of osgi context oeje8w.WebAppContext
• #12714 - MongoSessionDataStore can't upsert sessions if workerName contains token deliminators
• #12706 - Export ArrayByteBufferPool statistics via JMX
• #12705 - Orphaned sessions are never deleted at runtime in the SessionDataStore.
• #12690 - Add configurable capping for values of H2 MAX_HEADER_LIST_SIZE settings frames
• #12689 - Add statistics about ByteBufferPool.acquire() calls made for which there is no bucket
• #12683 - Cross context dispatch to root context uses incorrect target path
• #12681 - CachingHttpContentFactory$CachedHttpContent already released buffer
• #12671 - Check UriCompliance.Violation.ALLOW_BAD_UTF8 in query parameter extraction
• #12670 - Improve buffer management of HTTP/1 response headers
• #12652 - Jetty Reactive client hangs for HTTP 401 responses.
• #12650 - Attribute org.eclipse.jetty.multipartConfig is null
• #12646 - CompleteListener may be invoked twice
• #12639 - Request.Content.getContentType()'s Javadoc contradicts HttpConnection.normalizeRequest()
• #12634 - Update jaas index.adoc (@karstenhusberg)
• #12633 - Ensure a redirect of the HttpServletResponse will close HttpOutput
• #12626 - Wrong ? packages in the JNDI mail example (@karstenhusberg)
• #12609 - Change of behaviour with HttpServletResponse.sendError(0) in EE10
• #12428 - No ALPNProcessor for org.bouncycastle.jsse.provider.ProvSSLEngine error with jetty http2 client (@lucarota-eutelsat, @lucarota)

This is a sponsored release for an End of Life version of Jetty.

Changelog

• #12268 - IteratingCallback may iterate too much when process() returns Action.IDLE
• #12648 - Backport improved handling of bad Gzip content (and Gzip Exceptions)
• #12532 - Backport of deprecation of UserInfo on URI (in violation of RFC2616 spec)

• #12612 - Use Compression classes for client decoding
• #12611 - Supporting Compression discovery with ServiceLoader.
• #12593 - Create start.d/*.ini for [ini-template] modules
• #12564 - Enhance HTTP Compliance CRLF modes
• #12553 - Execute immediately HTTP/2 failures
• #12547 - Improve module deprecation
• #12546 - Added documentation for DoSHandler.
• #12534 - Jetty 12.1.x ee9 ee10 ee11 default servlet test resource servlet test
• #12531 - Reworking jetty-compression for JPMS
• #12529 - Undisable ee9 BlockingTest and fix HttpChannel.produceContent
• #12505 - ErrorPageErrorHandler does not use the proper attributes for error handling
• #12502 - Undisable WebAppContextTest.testGetResourcePaths
• #12486 - Undisable and fix PartialRFC2616Test
• #12436 - Allow headers size extend to maxRequestHeadersSize in http client (@shaoxt)
• #12324 - Response compression does not work when the Accept-Encoding: * request header is used.
• #12266 - InvocationType improvements and cleanups
• #12106 - Document protected and hidden classes
• #11947 - Jetty12: HttpConfiguration#_relativeRedirectAllowed flipped to true per default
• #11579 - Introduce UriCompliance.Violation.FRAGMENT to reject HTTP Request Line that includes fragment section.
• #11307 - Explicit demand control in WebSocket endpoints with only onWebSocketFrame()
• #9051 - Review Jetty-12 DelayedHandler
• #5308 - Extract httpConfig and scheduler configuration out of jetty.xml
• #3377 - Improve jetty-ssl-context.xml