Andy Wilkinson d9e4b66eee Add properties for new max part count and max part header size ...

To address CVE-2025-48976 and CVE-2025-48988, Tomcat 10.1.42 has
introduced two new configuration settings – maxPartCount and
maxPartHeaderSize. The default values for these configuration
settings have proven hard to get right and some applications have
had to increase the default limits. To ease their configuration in
Spring Boot, this commit introduces configuration properties for
the new settings:

-  server.tomcat.max-part-count (maxPartCount)
-  server.tomcat.max-part-header-size (maxPartHeaderSize)

The defaults are aligned with those of Tomcat 10.1.42
(10 and 512 bytes respectively).

Closes gh-45869

2025-06-18 09:46:09 +01:00

..

src

Add properties for new max part count and max part header size

2025-06-18 09:46:09 +01:00

build.gradle

Order dependencies

2025-03-18 15:22:26 +01:00