ForwardedHeaderRequestWrapper should return a new StringBuffer instance on each invocation of the getRequestURL method [SPR-15423]

[spring-projects-issues]

Bryan Kelly opened SPR-15423 and commented

ForwardedHeaderFilter returns the same StringBuffer for every invocation. This means that if the resulting StringBuffer is modified it changes the state of the HttpServletRequest.

Instead a new StringBuffer should be returned for every invocation.

---

Affects: 4.3.7, 5.0 M5

Referenced from: commits 9a91666, d0d7a88

[spring-projects-issues]

Rob Winch commented

Thanks for the report and PR! This is now merged into 4.3.x and master

[spring-projects-issues]

Bryan Kelly commented

I have been able to confirm that the changes fix the issue that was reported.