Branch: refs/heads/stable-16.10.x
Home: https://github.com/xwiki/xwiki-platform
Commit: 972a1c9ecaf53f8945d0aeafaec63afd43d27bb3
https://github.com/xwiki/xwiki-platform/commit/972a1c9ecaf53f8945d0aeafaec6…
Author: Simon Urli <simon.urli(a)xwiki.com>
Date: 2025-10-24 (Fri, 24 Oct 2025)
Changed paths:
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/javascript.vm
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/NavigationIT.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/pom.xml
A xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/FrontendURLCheckPolicy.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/URLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/script/URLSecurityScriptService.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/main/java/org/xwiki/url/internal/DefaultURLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/test/java/org/xwiki/url/internal/DefaultURLConfigurationTest.java
M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/link/link-protection.js
M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm
Log Message:
-----------
XWIKI-23630: The link protection is too intrusive
* Define a policy for the URL check frontend to allow enabling it only
for comments and use that default behaviour
* Refactor the URL frontend check to take into account the new policy
and fix the editor issue
* Refactor integration test
(cherry picked from commit 633ac65a3ee8fdc11cdfbdddda85ff2541f20039)
To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications
Branch: refs/heads/stable-17.4.x
Home: https://github.com/xwiki/xwiki-platform
Commit: b76283bcce3e421eb18d80654d1a16bfb29ef069
https://github.com/xwiki/xwiki-platform/commit/b76283bcce3e421eb18d80654d1a…
Author: Simon Urli <simon.urli(a)xwiki.com>
Date: 2025-10-24 (Fri, 24 Oct 2025)
Changed paths:
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/javascript.vm
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/NavigationIT.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/pom.xml
A xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/FrontendURLCheckPolicy.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/URLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/script/URLSecurityScriptService.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/main/java/org/xwiki/url/internal/DefaultURLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/test/java/org/xwiki/url/internal/DefaultURLConfigurationTest.java
M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/link/link-protection.js
M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm
Log Message:
-----------
XWIKI-23630: The link protection is too intrusive
* Define a policy for the URL check frontend to allow enabling it only
for comments and use that default behaviour
* Refactor the URL frontend check to take into account the new policy
and fix the editor issue
* Refactor integration test
(cherry picked from commit 633ac65a3ee8fdc11cdfbdddda85ff2541f20039)
To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications
Branch: refs/heads/stable-17.9.x
Home: https://github.com/xwiki/xwiki-platform
Commit: e15dc8184f7680656a82feda6cc699218b9192d5
https://github.com/xwiki/xwiki-platform/commit/e15dc8184f7680656a82feda6cc6…
Author: Simon Urli <simon.urli(a)xwiki.com>
Date: 2025-10-24 (Fri, 24 Oct 2025)
Changed paths:
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/javascript.vm
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/NavigationIT.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/pom.xml
A xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/FrontendURLCheckPolicy.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/URLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/script/URLSecurityScriptService.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/main/java/org/xwiki/url/internal/DefaultURLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/test/java/org/xwiki/url/internal/DefaultURLConfigurationTest.java
M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/link/link-protection.js
M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm
Log Message:
-----------
XWIKI-23630: The link protection is too intrusive
* Define a policy for the URL check frontend to allow enabling it only
for comments and use that default behaviour
* Refactor the URL frontend check to take into account the new policy
and fix the editor issue
* Refactor integration test
(cherry picked from commit 633ac65a3ee8fdc11cdfbdddda85ff2541f20039)
To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications
Branch: refs/heads/master
Home: https://github.com/xwiki/xwiki-platform
Commit: 4b20d9c4330163e8670d6cc8bf79e222c9393ff6
https://github.com/xwiki/xwiki-platform/commit/4b20d9c4330163e8670d6cc8bf79…
Author: Simon Urli <simon.urli(a)xwiki.com>
Date: 2025-10-24 (Fri, 24 Oct 2025)
Changed paths:
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/javascript.vm
M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/NavigationIT.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/pom.xml
A xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/FrontendURLCheckPolicy.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/URLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-api/src/main/java/org/xwiki/url/script/URLSecurityScriptService.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/main/java/org/xwiki/url/internal/DefaultURLConfiguration.java
M xwiki-platform-core/xwiki-platform-url/xwiki-platform-url-default/src/test/java/org/xwiki/url/internal/DefaultURLConfigurationTest.java
M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/link/link-protection.js
M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm
Log Message:
-----------
XWIKI-23630: The link protection is too intrusive
* Define a policy for the URL check frontend to allow enabling it only
for comments and use that default behaviour
* Refactor the URL frontend check to take into account the new policy
and fix the editor issue
* Refactor integration test
To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications
Branch: refs/heads/master
Home: https://github.com/xwiki/xwiki-commons
Commit: ce6bc970c3c528454a53a4227ea9db1bb0bad649
https://github.com/xwiki/xwiki-commons/commit/ce6bc970c3c528454a53a4227ea9d…
Author: Michael Hamann <michael.hamann(a)xwiki.com>
Date: 2025-10-24 (Fri, 24 Oct 2025)
Changed paths:
M xwiki-commons-core/xwiki-commons-xml/pom.xml
A xwiki-commons-core/xwiki-commons-xml/src/main/java/org/xwiki/xml/internal/html/CachedDocumentBuilderProvider.java
M xwiki-commons-core/xwiki-commons-xml/src/main/java/org/xwiki/xml/internal/html/DefaultHTMLCleaner.java
M xwiki-commons-core/xwiki-commons-xml/src/main/resources/META-INF/components.txt
M xwiki-commons-core/xwiki-commons-xml/src/test/java/org/xwiki/xml/html/DefaultHTMLCleanerComponentList.java
A xwiki-commons-core/xwiki-commons-xml/src/test/java/org/xwiki/xml/internal/html/CachedDocumentBuilderProviderTest.java
Log Message:
-----------
XCOMMONS-3458: HTMLCleaner should use a securely configured document builder (#1482)
* Configure the document builder to use secure parsing and not load external DTDs.
* Introduce a new component to provide the document builder to avoid depending on too many classes in DefaultHTMLCleaner.
* Add a unit test for the new component, verifying both the caching and the secure processing configuration.
* Add the new component to DefaultHTMLCleanerComponentList to make it available in tests that use the HTML cleaner.
* Increase test coverage to actual coverage.
To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications