KamoCRM

Let the WebDAV verbs through Spring Security's firewall

FixEmailService
Ya
25 Septemba 2026, 19:04 UTC
Mwandishi
Kamo
Ahadi ya
04f732e

StrictHttpFirewall admits only GET, HEAD, POST, PUT, PATCH, DELETE and OPTIONS, and answered every PROPFIND, PROPPATCH, REPORT, MKCOL and MKCALENDAR to /dav/** with an empty 400 before any handler ran, so no CalDAV or CardDAV client could discover a calendar or address book (found by SP07 Task 37 in production). The firewall now also admits those five verbs; every other check of the strict firewall stays, and TRACE, CONNECT, LOCK and unknown verbs are still refused.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru MileleMtazamo wa bei