Since Spring Framework's HttpMethod#valueOf now performs a case-insensitive
lookup (spring-framework#36518), HttpMethod.valueOf("get") resolves to
HttpMethod.GET instead of a distinct non-canonical value.
As a result, StrictServerWebExchangeFirewallTests#getFirewalledExchangeWhenLowercaseGetThenThrowsServerExchangeRejectedException
no longer holds: a lowercase get request is no longer distinguishable as
non-canonical case by the time it reaches the firewall, so it is processed
as an ordinary GET instead of being rejected.
This test has been disabled since the behavior it asserts is no longer
possible upstream. The team should confirm whether to remove it outright, or
repurpose it to document that a customized ServerExchangeRejectedHandler
is no longer invoked for this case.
Related to #19528.
Since Spring Framework's
HttpMethod#valueOfnow performs a case-insensitivelookup (spring-framework#36518),
HttpMethod.valueOf("get")resolves toHttpMethod.GETinstead of a distinct non-canonical value.As a result,
StrictServerWebExchangeFirewallTests#getFirewalledExchangeWhenLowercaseGetThenThrowsServerExchangeRejectedExceptionno longer holds: a lowercase
getrequest is no longer distinguishable asnon-canonical case by the time it reaches the firewall, so it is processed
as an ordinary
GETinstead of being rejected.This test has been disabled since the behavior it asserts is no longer
possible upstream. The team should confirm whether to remove it outright, or
repurpose it to document that a customized
ServerExchangeRejectedHandleris no longer invoked for this case.
Related to #19528.