Use HTTPS in URL

Author: garydgregory

commons-fileupload2-core/src/main/java/org/apache/commons/fileupload2/core/AbstractFileUpload.java

@@ -33,7 +33,7 @@
  * High level API for processing file uploads.
  * <p>
  * This class handles multiple files per single HTML widget, sent using {@code multipart/mixed} encoding type, as specified by
- * <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(RequestContext)} to acquire a list of {@link FileItem}s associated with
+ * <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(RequestContext)} to acquire a list of {@link FileItem}s associated with
  * a given HTML widget.
  * </p>
  * <p>
@@ -279,7 +279,7 @@ public Charset getHeaderCharset() {
     public abstract FileItemInputIterator getItemIterator(R request) throws FileUploadException, IOException;
 
     /**
-     * Gets an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Gets an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param requestContext The context for the request to be parsed.
      * @return An iterator to instances of {@code FileItemInput} parsed from the request, in the order that they were transmitted.
@@ -430,7 +430,7 @@ private void parseHeaderLine(final FileItemHeaders headers, final String header)
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A map of {@code FileItem} instances parsed from the request.
@@ -439,7 +439,7 @@ private void parseHeaderLine(final FileItemHeaders headers, final String header)
     public abstract Map<String, List<I>> parseParameterMap(R request) throws FileUploadException;
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param ctx The context for the request to be parsed.
      * @return A map of {@code FileItem} instances parsed from the request.
@@ -459,7 +459,7 @@ public Map<String, List<I>> parseParameterMap(final RequestContext ctx) throws F
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A list of {@code FileItem} instances parsed from the request, in the order that they were transmitted.
@@ -468,7 +468,7 @@ public Map<String, List<I>> parseParameterMap(final RequestContext ctx) throws F
     public abstract List<I> parseRequest(R request) throws FileUploadException;
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param requestContext The context for the request to be parsed.
      * @return A list of {@code FileItem} instances parsed from the request, in the order that they were transmitted.

commons-fileupload2-core/src/main/java/org/apache/commons/fileupload2/core/MultipartInput.java

@@ -34,7 +34,7 @@
  * Low-level API for processing file uploads.
  *
  * <p>
- * This class can be used to process data streams conforming to MIME 'multipart' format as defined in <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC
+ * This class can be used to process data streams conforming to MIME 'multipart' format as defined in <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC
  * 1867</a>. Arbitrarily large amounts of data in the stream can be processed under constant memory usage.
  * </p>
  * <p>

commons-fileupload2-core/src/main/java/org/apache/commons/fileupload2/core/package-info.java

@@ -17,7 +17,7 @@
 
 /**
  * <p>
- * A component for handling HTML file uploads as specified by <a href="http://www.ietf.org/rfc/rfc1867.txt" target="_top">RFC&nbsp;1867</a>. This component
+ * A component for handling HTML file uploads as specified by <a href="https://www.ietf.org/rfc/rfc1867.txt" target="_top">RFC&nbsp;1867</a>. This component
  * provides support for uploads within both servlets (JSR 53) and portlets (JSR 168).
  * </p>
  * <p>

commons-fileupload2-jakarta-servlet5/src/main/java/org/apache/commons/fileupload2/jakarta/servlet5/JakartaServletFileUpload.java

@@ -32,7 +32,7 @@
  * High level API for processing file uploads.
  * <p>
  * This class handles multiple files per single HTML widget, sent using {@code multipart/mixed} encoding type, as specified by
- * <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(HttpServletRequest)} to acquire a list of {@link FileItem}s associated
+ * <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(HttpServletRequest)} to acquire a list of {@link FileItem}s associated
  * with a given HTML widget.
  * </p>
  * <p>
@@ -79,7 +79,7 @@ public JakartaServletFileUpload(final F fileItemFactory) {
     }
 
     /**
-     * Gets an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
+     * Gets an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
      *
      * @param request The servlet request to be parsed.
      * @return An iterator to instances of {@code FileItemInput} parsed from the request, in the order that they were transmitted.
@@ -93,7 +93,7 @@ public FileItemInputIterator getItemIterator(final HttpServletRequest request) t
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A map of {@code FileItem} instances parsed from the request.
@@ -105,7 +105,7 @@ public Map<String, List<I>> parseParameterMap(final HttpServletRequest request)
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A list of {@code FileItem} instances parsed from the request, in the order that they were transmitted.

commons-fileupload2-jakarta-servlet6/src/main/java/org/apache/commons/fileupload2/jakarta/servlet6/JakartaServletFileUpload.java

@@ -32,7 +32,7 @@
  * High level API for processing file uploads.
  * <p>
  * This class handles multiple files per single HTML widget, sent using {@code multipart/mixed} encoding type, as specified by
- * <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(HttpServletRequest)} to acquire a list of {@link FileItem}s associated
+ * <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(HttpServletRequest)} to acquire a list of {@link FileItem}s associated
  * with a given HTML widget.
  * </p>
  * <p>
@@ -79,7 +79,7 @@ public JakartaServletFileUpload(final F fileItemFactory) {
     }
 
     /**
-     * Gets an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
+     * Gets an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
      *
      * @param request The servlet request to be parsed.
      * @return An iterator to instances of {@code FileItemInput} parsed from the request, in the order that they were transmitted.
@@ -93,7 +93,7 @@ public FileItemInputIterator getItemIterator(final HttpServletRequest request) t
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A map of {@code FileItem} instances parsed from the request.
@@ -105,7 +105,7 @@ public Map<String, List<I>> parseParameterMap(final HttpServletRequest request)
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A list of {@code FileItem} instances parsed from the request, in the order that they were transmitted.

commons-fileupload2-javax/src/main/java/org/apache/commons/fileupload2/javax/JavaxServletFileUpload.java

@@ -32,7 +32,7 @@
  * High level API for processing file uploads.
  * <p>
  * This class handles multiple files per single HTML widget, sent using {@code multipart/mixed} encoding type, as specified by
- * <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(HttpServletRequest)} to acquire a list of {@link FileItem}s associated
+ * <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link #parseRequest(HttpServletRequest)} to acquire a list of {@link FileItem}s associated
  * with a given HTML widget.
  * </p>
  * <p>
@@ -79,7 +79,7 @@ public JavaxServletFileUpload(final F fileItemFactory) {
     }
 
     /**
-     * Gets an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
+     * Gets an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
      *
      * @param request The servlet request to be parsed.
      * @return An iterator to instances of {@code FileItemInput} parsed from the request, in the order that they were transmitted.
@@ -93,7 +93,7 @@ public FileItemInputIterator getItemIterator(final HttpServletRequest request) t
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A map of {@code FileItem} instances parsed from the request.
@@ -105,7 +105,7 @@ public Map<String, List<I>> parseParameterMap(final HttpServletRequest request)
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The servlet request to be parsed.
      * @return A list of {@code FileItem} instances parsed from the request, in the order that they were transmitted.

commons-fileupload2-portlet/src/main/java/org/apache/commons/fileupload2/portlet/JavaxPortletFileUpload.java

@@ -33,7 +33,7 @@
  * High level API for processing file uploads.
  * <p>
  * This class handles multiple files per single HTML widget, sent using {@code multipart/mixed} encoding type, as specified by
- * <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link JavaxServletFileUpload#parseRequest(javax.servlet.http.HttpServletRequest)} to acquire
+ * <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>. Use {@link JavaxServletFileUpload#parseRequest(javax.servlet.http.HttpServletRequest)} to acquire
  * a list of {@link FileItem}s associated with a given HTML widget.
  * </p>
  * <p>
@@ -75,7 +75,7 @@ public JavaxPortletFileUpload(final F fileItemFactory) {
     }
 
     /**
-     * Gets an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
+     * Gets an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} file item iterator.
      *
      * @param request The portlet request to be parsed.
      * @return An iterator to instances of {@code FileItemInput} parsed from the request, in the order that they were transmitted.
@@ -89,7 +89,7 @@ public FileItemInputIterator getItemIterator(final ActionRequest request) throws
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The portlet request to be parsed.
      * @return A map of {@code FileItem} instances parsed from the request.
@@ -101,7 +101,7 @@ public Map<String, List<I>> parseParameterMap(final ActionRequest request) throw
     }
 
     /**
-     * Parses an <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
+     * Parses an <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a> compliant {@code multipart/form-data} stream.
      *
      * @param request The portlet request to be parsed.
      * @return A list of {@code FileItem} instances parsed from the request, in the order that they were transmitted.

src/site/xdoc/index.xml

@@ -33,7 +33,7 @@
       </p>
       <p>
         FileUpload parses HTTP requests which conform to
-        <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>,
+        <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>,
         "Form-based File Upload in HTML". That is, if an HTTP request is
         submitted using the POST method, and with a content type of
         "multipart/form-data", then FileUpload can parse that request, and

src/site/xdoc/security.xml

@@ -54,7 +54,7 @@
 
         <subsection name="Fixed in Apache Commons FileUpload 2.0.0-M4">
           <p><b>Important: Denial of Service</b> <a
-          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976">CVE-2025-48976</a></p>
+          href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976">CVE-2025-48976</a></p>
 
           <p>Apache Commons FileUpload 2.x before 2.0.0-M4 provides a hard-coded
           limit of 10kB for the size of the headers associated with a multipart
@@ -78,7 +78,7 @@
 
         <subsection name="Fixed in Apache Commons FileUpload 1.6.0">
           <p><b>Important: Denial of Service</b> <a
-          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976">CVE-2025-48976</a></p>
+          href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976">CVE-2025-48976</a></p>
 
           <p>Apache Commons FileUpload 1.x before 1.6.0 provides a hard-coded
           limit of 10kB for the size of the headers associated with a multipart
@@ -96,7 +96,7 @@
 
         <subsection name="Fixed in Apache Commons FileUpload 1.5">
           <p><b>Important: Denial of Service</b> <a
-          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998">CVE-2023-24998</a></p>
+          href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998">CVE-2023-24998</a></p>
 
           <p>Apache Commons FileUpload before 1.5 does not provide an option to
           limit the number of request parts to be processed resulting in the
@@ -139,21 +139,21 @@
 
         <subsection name="Fixed in Apache Commons FileUpload 1.3.2">
           <p><b>Low: Denial of Service</b> <a
-          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3092">CVE-2016-3092</a></p>
+          href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3092">CVE-2016-3092</a></p>
 
           <p>Specially crafted input can trigger a DoS (slow uploads), if the size of the MIME
           boundary is close to the size of the buffer in MultipartStream. This is also fixed
           for <a href="https://tomcat.apache.org/security.html">Apache Tomcat</a>.</p>
 
           <p>This was fixed in revision
-          <a href="http://svn.apache.org/viewvc?view=revision&amp;revision=1743480">1743480</a>.</p>
+          <a href="https://svn.apache.org/viewvc?view=revision&amp;revision=1743480">1743480</a>.</p>
 
           <p>Affects: 1.0? - 1.3.1</p>
         </subsection>
 
         <subsection name="Fixed in Apache Commons FileUpload 1.3.1">
           <p><b>Low: Denial of Service</b> <a
-          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-0050">CVE-2014-0050</a></p>
+          href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-0050">CVE-2014-0050</a></p>
 
           <p>MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in
           <a href="https://tomcat.apache.org/security.html">Apache Tomcat</a>,
@@ -162,21 +162,21 @@
           exit conditions.</p>
 
           <p>This was fixed in revision
-          <a href="http://svn.apache.org/viewvc?view=revision&amp;revision=1565143">1565143</a>.</p>
+          <a href="https://svn.apache.org/viewvc?view=revision&amp;revision=1565143">1565143</a>.</p>
 
           <p>Affects: 1.0? - 1.3</p>
         </subsection>
 
         <subsection name="Fixed in Apache Commons FileUpload 1.3">
 
           <p><b>Low: Improved Documentation for Multitenancy</b> <a
-          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-0248">CVE-2013-0248</a></p>
+          href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-0248">CVE-2013-0248</a></p>
 
           <p>Update the Javadoc and documentation to make it clear that setting a repository
           is required for a secure configuration if there are local, untrusted users.</p>
 
           <p>This was fixed in revision
-          <a href="http://svn.apache.org/viewvc?view=revision&amp;revision=1453273">1453273</a>.</p>
+          <a href="https://svn.apache.org/viewvc?view=revision&amp;revision=1453273">1453273</a>.</p>
 
           <p>Affects: 1.0 - 1.2.2</p>
         </subsection>

src/site/xdoc/using.xml

@@ -53,7 +53,7 @@
       <p>
         A file upload request comprises an ordered list of <em>items</em> that
         are encoded according to
-        <a href="http://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>,
+        <a href="https://www.ietf.org/rfc/rfc1867.txt">RFC 1867</a>,
         "Form-based File Upload in HTML". FileUpload can parse such a request
         and provide your application with a list of the individual uploaded
         items. Each such item implements the <code>FileItem</code> interface,