SONAR-8388 HTTP POST request parameters are handled as UTF-8 by default

it/it-tests/src/test/java/it/settings/DeprecatedPropertiesWsTest.java

@@ -353,7 +353,7 @@ public class DeprecatedPropertiesWsTest {
       .url(url));
   }
 
-  public static Response call(Request.Builder requestBuilder) {
+  private static Response call(Request.Builder requestBuilder) {
     try {
       requestBuilder.header("Authorization", Credentials.basic("admin", "admin"));
       Response response = new OkHttpClient.Builder()

server/sonar-server/src/main/java/org/sonar/server/platform/web/SecurityServletFilter.java

@@ -33,7 +33,6 @@ import javax.servlet.http.HttpServletResponse;
 
 /**
  * This servlet filter sets response headers that enable browser protection against several classes if Web attacks.
- * The list of headers is mirrored in environment.rb as a workaround to Rack swallowing the headers..
  */
 public class SecurityServletFilter implements Filter {
 

server/sonar-server/src/test/java/org/sonar/server/setting/ws/SetActionTest.java

@@ -374,6 +374,14 @@ public class SetActionTest {
     assertGlobalSetting("my.key", "My Value");
   }
 
+  @Test
+  public void persist_global_setting_with_non_ascii_characters() {
+    callForGlobalSetting("my.key", "fi±∞…");
+
+    assertGlobalSetting("my.key", "fi±∞…");
+    assertThat(settingsChangeNotifier.wasCalled).isTrue();
+  }
+
   @Test
   public void fail_when_no_key() {
     expectedException.expect(IllegalArgumentException.class);

server/sonar-server/src/test/java/org/sonar/server/setting/ws/ValuesActionTest.java

@@ -722,6 +722,19 @@ public class ValuesActionTest {
       "sonar.plugin.licenseHash.secured");
   }
 
+  @Test
+  public void return_simple_value_with_non_ascii_characters() throws Exception {
+    setAuthenticatedUser();
+    definitions.addComponent(PropertyDefinition
+      .builder("foo")
+      .build());
+    propertyDb.insertProperties(newGlobalPropertyDto().setKey("foo").setValue("fi±∞…"));
+
+    ValuesWsResponse result = executeRequestForGlobalProperties("foo");
+
+    assertThat(result.getSettings(0).getValue()).isEqualTo("fi±∞…");
+  }
+
   @Test
   public void fail_when_user_has_not_project_browse_permission() throws Exception {
     userSession.login("project-admin").addProjectUuidPermissions(CODEVIEWER, project.uuid());

server/sonar-web/src/main/webapp/WEB-INF/web.xml

@@ -15,6 +15,14 @@
     <filter-name>UserSessionFilter</filter-name>
     <filter-class>org.sonar.server.user.UserSessionFilter</filter-class>
   </filter>
+  <filter>
+    <filter-name>SetCharacterEncodingFilter</filter-name>
+    <filter-class>org.apache.catalina.filters.SetCharacterEncodingFilter</filter-class>
+    <init-param>
+      <param-name>encoding</param-name>
+      <param-value>UTF-8</param-value>
+    </init-param>
+  </filter>
   <filter>
     <filter-name>SecurityFilter</filter-name>
     <filter-class>org.sonar.server.platform.web.SecurityServletFilter</filter-class>
@@ -37,6 +45,10 @@
   </filter>
 
   <!-- order of execution is important -->
+  <filter-mapping>
+    <filter-name>SetCharacterEncodingFilter</filter-name>
+    <url-pattern>/*</url-pattern>
+  </filter-mapping>
   <filter-mapping>
     <filter-name>RootFilter</filter-name>
     <url-pattern>/*</url-pattern>