spring-projects / spring-security

Spring Security
http://spring.io/projects/spring-security
Apache License 2.0
8.45k stars 5.76k forks source link

Fix possible ArrayIndexOutOfBoundsException in XorCsrfTokenRequestAtt… #14976

Open kratosmy opened 2 weeks ago

kratosmy commented 2 weeks ago

To fix gh-https://github.com/spring-projects/spring-security/issues/13310, I make a hotfix to ensure that System.arraycopy() won't cause a ArrayIndexOutOfBoundsException.