- notifications - lists.xwiki.org

[xwiki/xwiki-platform] 018914: XWIKI-23891: Resources that are referenced without...
by XWiki Notifications 15 Jan '26

15 Jan '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 0189141c979155ae002747cd25362cc67ec80fdf https://github.com/xwiki/xwiki-platform/commit/0189141c979155ae002747cd2536… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java Log Message: ----------- XWIKI-23891: Resources that are referenced without quotes aren't extracted from CSS WebJar resources during export * Make the regular expression stricter to avoid slow matching. (cherry picked from commit 35539513915b76b1e90f450461f2847f9f50e93b) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 19334f: XWIKI-23902: Protect against path traversal from W...
by XWiki Notifications 15 Jan '26

15 Jan '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 19334ff6cd2aefd690a52e67670bd8c65bc05e54 https://github.com/xwiki/xwiki-platform/commit/19334ff6cd2aefd690a52e67670b… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-23902: Protect against path traversal from WebJar * Detect path traversal both in URLs in CSS and when copying resources. * Add tests. (cherry picked from commit 9f747fcd3200259a1de51957d3f5f6acc8e3816c) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-19779: Bad display of non-viewable users in the likers page
by XWiki Notifications 15 Jan '26

15 Jan '26

1 0

[[email protected]][Issue] Updates for XWIKI-23802: The icon theme preview drop-down is out of alignment
by XWiki Notifications 15 Jan '26

15 Jan '26

1 0

[[email protected]][Issue] Updates for XWIKI-20262: HTTP error 500 with regular expression request
by XWiki Notifications 15 Jan '26

15 Jan '26

1 0

[xwiki/xwiki-platform] 2e5571: XWIKI-23891: Resources that are referenced without...
by XWiki Notifications 15 Jan '26

15 Jan '26

Branch: refs/heads/stable-18.0.x Home: https://github.com/xwiki/xwiki-platform Commit: 2e5571681f4254b56f139cc4e7aa5f755edbf3f7 https://github.com/xwiki/xwiki-platform/commit/2e5571681f4254b56f139cc4e7aa… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java Log Message: ----------- XWIKI-23891: Resources that are referenced without quotes aren't extracted from CSS WebJar resources during export * Make the regular expression stricter to avoid slow matching. (cherry picked from commit 35539513915b76b1e90f450461f2847f9f50e93b) Commit: b66f96b08dcbb3b1ce1de8d106588a7b260de9dd https://github.com/xwiki/xwiki-platform/commit/b66f96b08dcbb3b1ce1de8d10658… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-23902: Protect against path traversal from WebJar * Detect path traversal both in URLs in CSS and when copying resources. * Add tests. (cherry picked from commit 9f747fcd3200259a1de51957d3f5f6acc8e3816c) Compare: https://github.com/xwiki/xwiki-platform/compare/65e63d811f71...b66f96b08dcb To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 355395: XWIKI-23891: Resources that are referenced without...
by XWiki Notifications 15 Jan '26

15 Jan '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 35539513915b76b1e90f450461f2847f9f50e93b https://github.com/xwiki/xwiki-platform/commit/35539513915b76b1e90f450461f2… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java Log Message: ----------- XWIKI-23891: Resources that are referenced without quotes aren't extracted from CSS WebJar resources during export * Make the regular expression stricter to avoid slow matching. Commit: 9f747fcd3200259a1de51957d3f5f6acc8e3816c https://github.com/xwiki/xwiki-platform/commit/9f747fcd3200259a1de51957d3f5… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-23902: Protect against path traversal from WebJar * Detect path traversal both in URLs in CSS and when copying resources. * Add tests. Compare: https://github.com/xwiki/xwiki-platform/compare/f09edee5761c...9f747fcd3200 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XRENDERING-487: Add title parameter for message macros
by XWiki Notifications 15 Jan '26

15 Jan '26

1 0

[[email protected]][Issue] Updates for XWIKI-21902: HTML export does not display user avatar probably due to wrong storage path of image in archive
by XWiki Notifications 15 Jan '26

15 Jan '26

1 0

[[email protected]][Issue] Updates for XWIKI-21901: Allow to exclude action menu buttons of page during HTML export
by XWiki Notifications 15 Jan '26

15 Jan '26

1 0