Sagar Chanchal cb9ce4d9e2 Fix out-of-bounds read for truncated percent-escape in opaque host ...

The opaque-host percent-escape validation guard reads
input.codePointAt(i + 2) after only checking 'input.length() - i < 2',
so an input such as 'foo://%4' throws StringIndexOutOfBoundsException
instead of reporting a validation error.

Fix the bounds guard to require two code points after '%' and check
ASCII hex digits rather than ASCII digits, matching the URL spec, where
invalid percent-escapes in opaque hosts are validation errors, not
failures.

Signed-off-by: Sagar Chanchal <Sagarr2112@gmail.com>

2026-09-18 17:26:03 +02:00

..

src

Fix out-of-bounds read for truncated percent-escape in opaque host

2026-09-18 17:26:03 +02:00

spring-web.gradle

Exclude DataAccessException and MessagingException in DisconnectedClientHelper

2026-01-14 11:44:43 +00:00