October 2026 - notifications

[xwiki/xwiki-platform] d055c6: XWIKI-25118: Add automated test for "Live email no...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/fix-ci-6579 Home: https://github.com/xwiki/xwiki-platform Commit: d055c61e50482b8791ee7acc2762016bf4218696 https://github.com/xwiki/xwiki-platform/commit/d055c61e50482b8791ee7acc2762… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-notifications/xwiki-platform-notifications-test/xwiki-platform-notifications-test-docker/src/test/it/org/xwiki/platform/notifications/test/ui/NotificationsEmailsIT.java Log Message: ----------- XWIKI-25118: Add automated test for "Live email notifications on subwiki" * Fix NotificationsEmailsIT#liveEmailsOnSubwiki failing on Firefox: follow the subwiki from a page without Live Data instead of the notification settings of the user profile, whose two Live Data never finished loading because the Live Data code was loaded twice (main wiki and subwiki webjar URLs, the subwiki being browsed through a path-based URL with domain-based URLs configured) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] bf6f1f: [Misc] Add unit tests for SchedulerPlugin
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/more-unit-tests-for-xwiki-platform-scheduler-api Home: https://github.com/xwiki/xwiki-platform Commit: bf6f1fdb4bac220394b07ec030aa89228226fe0b https://github.com/xwiki/xwiki-platform/commit/bf6f1fdb4bac220394b07ec030aa… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-scheduler/xwiki-platform-scheduler-api/pom.xml M xwiki-platform-core/xwiki-platform-scheduler/xwiki-platform-scheduler-api/src/main/java/com/xpn/xwiki/plugin/scheduler/SchedulerPlugin.java A xwiki-platform-core/xwiki-platform-scheduler/xwiki-platform-scheduler-api/src/test/java/com/xpn/xwiki/plugin/scheduler/SchedulerPluginTest.java Log Message: ----------- [Misc] Add unit tests for SchedulerPlugin * Add SchedulerPluginTest, based on an in-memory Quartz scheduler that is never started, covering scheduling, pause/resume/unschedule/trigger, the job execution context, the disabled plugin, and the document, wiki deletion and classloader reset events * Add a package-private SchedulerPlugin#setEnabled() so that tests can enable the plugin without starting the default Quartz scheduler * Raise the module's JaCoCo instruction ratio from 0.07 to 0.48 Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/backport/stable-18.4.x/pr-6865 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 35964c: XWIKI-25275: Attachments stored in the S3 blob sto...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/stable-18.4.x Home: https://github.com/xwiki/xwiki-platform Commit: 35964cd75717ba3a6a23d6aa2db7e64341e7f941 https://github.com/xwiki/xwiki-platform/commit/35964cd75717ba3a6a23d6aa2db7… Author: ciaens <github.elongated262(a)passmail.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/pom.xml M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/main/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStream.java A xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/test/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStreamTest.java Log Message: ----------- XWIKI-25275: Attachments stored in the S3 blob store are truncated when a page is deleted or exported as XAR (#6865) * Fill each 4095-byte chunk of attachment content with InputStream#readNBytes in XAROutputFilterStream instead of stopping at the first read returning fewer bytes, which a network stream such as an S3 object does before its end * Add XAROutputFilterStreamTest: attachment and attachment revision content read from a stream returning short reads, contents of 0, 4095, 8190 and 13140 bytes read with short reads (same output as with a stream filling each read), XAR to XAR conversion of a multi-chunk attachment, read error after several short reads * Raise the coverage threshold of xwiki-platform-filter-stream-xar from 0.72 to 0.84 Co-authored-by: Claude <noreply(a)anthropic.com> (cherry picked from commit 6286e0557c1efd44989b293a12d5faa51cd298fc) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/backport/stable-17.10.x/pr-6865 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 80e3e7: XWIKI-25275: Attachments stored in the S3 blob sto...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 80e3e7f52295a7c7a54ffd7e84725bde7f254be2 https://github.com/xwiki/xwiki-platform/commit/80e3e7f52295a7c7a54ffd7e8472… Author: ciaens <github.elongated262(a)passmail.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/pom.xml M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/main/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStream.java A xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/test/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStreamTest.java Log Message: ----------- XWIKI-25275: Attachments stored in the S3 blob store are truncated when a page is deleted or exported as XAR (#6865) * Fill each 4095-byte chunk of attachment content with InputStream#readNBytes in XAROutputFilterStream instead of stopping at the first read returning fewer bytes, which a network stream such as an S3 object does before its end * Add XAROutputFilterStreamTest: attachment and attachment revision content read from a stream returning short reads, contents of 0, 4095, 8190 and 13140 bytes read with short reads (same output as with a stream filling each read), XAR to XAR conversion of a multi-chunk attachment, read error after several short reads * Raise the coverage threshold of xwiki-platform-filter-stream-xar from 0.72 to 0.84 Co-authored-by: Claude <noreply(a)anthropic.com> (cherry picked from commit 6286e0557c1efd44989b293a12d5faa51cd298fc) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-25243: Make CSRF tokens identical on all nodes of a cluster
by XWiki Notifications 14 Oct '26

14 Oct '26

1 0

[[email protected]][Issue] Updates for BLOG-270: Convert the functional tests to Docker-based tests
by XWiki Notifications 14 Oct '26

14 Oct '26

1 0

[xwiki/xwiki-platform] aa1880: XWIKI-25243: Make CSRF tokens identical on all nod...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/stable-18.9.x Home: https://github.com/xwiki/xwiki-platform Commit: aa1880bb813f10b001011bf78f149aa3c59fd96e https://github.com/xwiki/xwiki-platform/commit/aa1880bb813f10b001011bf78f14… Author: ciaens <github.elongated262(a)passmail.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-csrf/pom.xml M xwiki-platform-core/xwiki-platform-csrf/src/main/java/org/xwiki/csrf/CSRFToken.java M xwiki-platform-core/xwiki-platform-csrf/src/main/java/org/xwiki/csrf/CSRFTokenConfiguration.java M xwiki-platform-core/xwiki-platform-csrf/src/main/java/org/xwiki/csrf/internal/DefaultCSRFToken.java M xwiki-platform-core/xwiki-platform-csrf/src/main/java/org/xwiki/csrf/internal/DefaultCSRFTokenConfiguration.java M xwiki-platform-core/xwiki-platform-csrf/src/main/java/org/xwiki/csrf/script/CSRFTokenScriptService.java M xwiki-platform-core/xwiki-platform-csrf/src/test/java/org/xwiki/csrf/DefaultCSRFTokenConfigurationTest.java M xwiki-platform-core/xwiki-platform-csrf/src/test/java/org/xwiki/csrf/DefaultCSRFTokenTest.java M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/WikiEditIT.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-api/src/main/java/org/xwiki/security/authentication/AuthenticationConfiguration.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-25243: Make CSRF tokens identical on all nodes of a cluster (#6769) * DefaultCSRFToken derives the token (first 16 bytes of HMAC-SHA256 keyed with the authentication validation key, message "csrf:" + serialized user reference (or "guest") + ":" + time period) instead of storing random tokens in memory, so every node sharing the key computes the same token and tokens survive restarts * The tokens rotate with a time period: new csrf.tokenLifetime property (hours, default 24, 0 = never expire), the token of the previous period is still accepted * Add CSRFTokenConfiguration#getTokenLifetime (default method) and document the property in xwiki.properties.vm * The validation key is read once and a blank or missing key fails with an explicit IllegalStateException * Token validation uses a constant-time comparison and the warning no longer logs the expected token * Deprecate CSRFToken#clearToken and CSRFTokenScriptService#clearToken, a no-op for the default implementation * Document in AuthenticationConfiguration that the keys must be stable across calls and across cluster nodes * Depend on xwiki-platform-security-authentication-api, drop the SecureRandom and Initializable code * Expand the one-line Javadoc comments of the touched files to the multi-line form * Rewrite DefaultCSRFTokenTest for the derived tokens (key cache, blank key, period rotation, previous period, lifetime 0) and raise the coverage threshold of the module to 0.86 * WikiEditIT.allowForceSaveWhenCSRFIssue tampers the form_token field instead of clearing the server token Co-authored-by: Claude <noreply(a)anthropic.com> (cherry picked from commit 0d77f91a9512bd32c9daf527e618a17c9fe6a022) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] d1dcbc: XWIKI-25275: Attachments stored in the S3 blob sto...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/backport/stable-17.10.x/pr-6865 Home: https://github.com/xwiki/xwiki-platform Commit: d1dcbc49c3c75ceb78c0927a221980352d2b45b8 https://github.com/xwiki/xwiki-platform/commit/d1dcbc49c3c75ceb78c0927a2219… Author: ciaens <github.elongated262(a)passmail.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/pom.xml M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/main/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStream.java A xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/test/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStreamTest.java Log Message: ----------- XWIKI-25275: Attachments stored in the S3 blob store are truncated when a page is deleted or exported as XAR (#6865) * Fill each 4095-byte chunk of attachment content with InputStream#readNBytes in XAROutputFilterStream instead of stopping at the first read returning fewer bytes, which a network stream such as an S3 object does before its end * Add XAROutputFilterStreamTest: attachment and attachment revision content read from a stream returning short reads, contents of 0, 4095, 8190 and 13140 bytes read with short reads (same output as with a stream filling each read), XAR to XAR conversion of a multi-chunk attachment, read error after several short reads * Raise the coverage threshold of xwiki-platform-filter-stream-xar from 0.72 to 0.84 Co-authored-by: Claude <noreply(a)anthropic.com> (cherry picked from commit 6286e0557c1efd44989b293a12d5faa51cd298fc) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0