- notifications - lists.xwiki.org

[xwiki/xwiki-platform] e192ee: XWIKI-24208: Validate CSRF token during page sharing
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/stable-16.10.x Home: https://github.com/xwiki/xwiki-platform Commit: e192eef9b63d345738e051892a15c3dc993bda4b https://github.com/xwiki/xwiki-platform/commit/e192eef9b63d345738e051892a15… Author: Pierre Jeanjean <pierre.jeanjean(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-sharepage/xwiki-platform-sharepage-api/src/main/resources/templates/shareinline.vm M xwiki-platform-core/xwiki-platform-sharepage/xwiki-platform-sharepage-api/src/test/java/org/xwiki/sharepage/ShareInlineTemplateTest.java Log Message: ----------- XWIKI-24208: Validate CSRF token during page sharing (cherry picked from commit 6d307c071aa7319cb6326649f7260a895ee8d9fd) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki-contrib/oidc] 0ba66d: OIDC-297: Allow configuring the forbidden pattern ...
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/OIDC-297 Home: https://github.com/xwiki-contrib/oidc Commit: 0ba66dbc3db0bd553adfef7f9c6ace1f2f6061b2 https://github.com/xwiki-contrib/oidc/commit/0ba66dbc3db0bd553adfef7f9c6ace… Author: Raphaël Jakse <raphael.jakse(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M oidc-authenticator-configuration/src/main/java/org/xwiki/contrib/oidc/auth/internal/store/OIDCClientConfigurationClassDocumentInitializer.java M oidc-authenticator-configuration/src/main/java/org/xwiki/contrib/oidc/auth/store/OIDCClientConfiguration.java M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfiguration.java M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManager.java M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfigurationTest.java M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManagerTest.java Log Message: ----------- OIDC-297: Allow configuring the forbidden pattern and replacement when formatting the username and user subject To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/oidc/settings/notifications

1 0

[xwiki-contrib/oidc] 321856: Misc: add a default parameter to OIDCClientConfigu...
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/OIDC-297 Home: https://github.com/xwiki-contrib/oidc Commit: 3218562b57b2b636a21663309e69ab7da08cecfc https://github.com/xwiki-contrib/oidc/commit/3218562b57b2b636a21663309e69ab… Author: Raphaël Jakse <raphael.jakse(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfiguration.java Log Message: ----------- Misc: add a default parameter to OIDCClientConfiguration#compilePropertyIntoPattern() To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/oidc/settings/notifications

1 0

[xwiki/xwiki-platform] 8667e4: [Misc] ReduceCognitive Complexity to fix sonarqube...
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 8667e4be7e60494b34938918bc4566eb1bfceaa8 https://github.com/xwiki/xwiki-platform/commit/8667e4be7e60494b34938918bc45… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/widgets/validation/livevalidation_prototype.js Log Message: ----------- [Misc] ReduceCognitive Complexity to fix sonarqube-reported issue * The Cognitive Complexity had been increased by https://github.com/xwiki/xwiki-platform/pull/5500 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for OIDC-297: Allow configuring the forbidden pattern and replacement when formatting the username and user subjet
by XWiki Notifications 10 Jun '26

10 Jun '26

1 0

[xwiki/xwiki-platform] 3a09c6: XWIKI-24234: Improve escaping in mentions messages
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/stable-16.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 3a09c6e31f8f85f253d69f9ccd7530ff06818e7f https://github.com/xwiki/xwiki-platform/commit/3a09c6e31f8f85f253d69f9ccd75… Author: Pierre Jeanjean <pierre.jeanjean(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-mentions/xwiki-platform-mentions-notifications/src/main/resources/templates/mentions/mention.vm M xwiki-platform-core/xwiki-platform-mentions/xwiki-platform-mentions-test/xwiki-platform-mentions-test-docker/src/test/it/org/xwiki/mentions/test/ui/MentionsIT.java Log Message: ----------- XWIKI-24234: Improve escaping in mentions messages (cherry picked from commit 1a5e1645933fabf26ce5fd205de553139b3621c7) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki-contrib/oidc] a7f7a2: Misc: make converterManager mocking a bit more aut...
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/OIDC-297 Home: https://github.com/xwiki-contrib/oidc Commit: a7f7a2a9afdda7ce49c7172e234476144f50e338 https://github.com/xwiki-contrib/oidc/commit/a7f7a2a9afdda7ce49c7172e234476… Author: Raphaël Jakse <raphael.jakse(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfigurationTest.java Log Message: ----------- Misc: make converterManager mocking a bit more automatic in OIDCClientConfigurationTest Commit: cf11f8c9990940a3fe68a882e7355a49112c0db5 https://github.com/xwiki-contrib/oidc/commit/cf11f8c9990940a3fe68a882e7355a… Author: Raphaël Jakse <raphael.jakse(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M oidc-authenticator-configuration/src/main/java/org/xwiki/contrib/oidc/auth/internal/store/OIDCClientConfigurationClassDocumentInitializer.java M oidc-authenticator-configuration/src/main/java/org/xwiki/contrib/oidc/auth/store/OIDCClientConfiguration.java M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfiguration.java M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManager.java M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfigurationTest.java M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManagerTest.java Log Message: ----------- OIDC-297: Allow configuring the forbidden pattern and replacement when formatting the username and user subjet Compare: https://github.com/xwiki-contrib/oidc/compare/a7f7a2a9afdd%5E...cf11f8c99909 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/oidc/settings/notifications

1 0

[xwiki/xwiki-platform] 22f24a: XWIKI-23755: Import package metadata is improperly...
by XWiki Notifications 10 Jun '26

10 Jun '26

Branch: refs/heads/stable-16.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 22f24a6eed5395af4694cb4e8652026991a06cd6 https://github.com/xwiki/xwiki-platform/commit/22f24a6eed5395af4694cb4e8652… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-06-10 (Wed, 10 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/XARImportIT.java A xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/resources/XARImportIT/XSSImport.xar M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ImportAdministrationSectionPage.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/js/xwiki/importer/import.js Log Message: ----------- XWIKI-23755: Import package metadata is improperly escaped - Use textContent instead of Prototype.js's .update() method for displaying package metadata (package name, version, author, license, space name, document name, and attachment filename). - Add testXSSInPackageExplorer integration test that: - Uploads a XAR with HTML payloads in all displayed fields using a filename that itself contains HTML - Asserts each field is displayed as literal text (positive assertions) - Asserts no injected DOM elements with xss-* IDs exist (negative) - Adds XSSImport.xar test resource with unique HTML payloads per field Co-authored-by: Copilot <223556219+Copilot(a)users.noreply.github.com> (cherry picked from commit cdc18aedf88094666f1b21646aaa09693b821e9b) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-24398: Location pickers on new page or move page should have aria-label
by XWiki Notifications 10 Jun '26

10 Jun '26

1 0

[[email protected]][Issue] Updates for XWIKI-24356: Navigation panel keyboard focus should look similar to `:focus-visible`
by XWiki Notifications 10 Jun '26

10 Jun '26

1 0