- notifications - lists.xwiki.org

[[email protected]][Issue] Updates for XCOMMONS-3547: Path traversal via resources parameter in ssx and jsx enpoints - incomplete CVE-2025-55748 fix
by XWiki Notifications 20 May '26

20 May '26

1 0

[xwiki/xwiki-platform] 5bfdb1: [SECURITY] Validate CaptchaEngine type before dyna...
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/claude/magical-faraday-9otsF Home: https://github.com/xwiki/xwiki-platform Commit: 5bfdb14445d48e297b1cc8a4b24f5e7ae8b5ac2b https://github.com/xwiki/xwiki-platform/commit/5bfdb14445d48e297b1cc8a4b24f… Author: Claude <noreply(a)anthropic.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-core/xwiki-platform-captcha/xwiki-platform-captcha-api/src/main/java/org/xwiki/captcha/CaptchaException.java M xwiki-platform-core/xwiki-platform-captcha/xwiki-platform-captcha-jcaptcha/xwiki-platform-captcha-jcaptcha-api/src/main/java/org/xwiki/captcha/internal/CaptchaServiceManager.java A xwiki-platform-core/xwiki-platform-captcha/xwiki-platform-captcha-jcaptcha/xwiki-platform-captcha-jcaptcha-api/src/test/java/org/xwiki/captcha/internal/CaptchaServiceManagerTest.java Log Message: ----------- [SECURITY] Validate CaptchaEngine type before dynamic class loading Fixes SonarQube javasecurity:S6173 (dynamic class loading with potentially user-controlled input). In CaptchaServiceManager.getCaptchaService(), the engine class name could be influenced by untrusted input flowing through captchaParameters. The fix validates that the loaded class is assignable to CaptchaEngine before instantiating it, preventing arbitrary classes from being loaded. Also replaces the deprecated getConstructor(null).newInstance(null) with getDeclaredConstructor().newInstance(). Adds a message-only constructor to CaptchaException to support the new validation error path, and adds a CaptchaServiceManagerTest covering the validation logic. https://claude.ai/code/session_0175Ge3fDXFYeRBCxDeNx5vF To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 4824d0: XWIKI-24352: Bad escaping in WikiManager pages
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/stable-18.4.x Home: https://github.com/xwiki/xwiki-platform Commit: 4824d00a3ea0c1437b3739b3b349ddc977f641cc https://github.com/xwiki/xwiki-platform/commit/4824d00a3ea0c1437b3739b3b349… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-ui/xwiki-platform-wiki-ui-mainwiki/src/main/resources/WikiManager/JoinWiki.xml M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-ui/xwiki-platform-wiki-ui-mainwiki/src/main/resources/WikiManager/WikiActivityServiceCode.xml Log Message: ----------- XWIKI-24352: Bad escaping in WikiManager pages (cherry picked from commit 81dc4e862381e088a4d7744442d7a17c1de7e90e) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] e9d3bb: XWIKI-24352: Bad escaping in WikiManager pages
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: e9d3bb339874ed095c1f9424b6eb58cb82515175 https://github.com/xwiki/xwiki-platform/commit/e9d3bb339874ed095c1f9424b6eb… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-ui/xwiki-platform-wiki-ui-mainwiki/src/main/resources/WikiManager/JoinWiki.xml M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-ui/xwiki-platform-wiki-ui-mainwiki/src/main/resources/WikiManager/WikiActivityServiceCode.xml Log Message: ----------- XWIKI-24352: Bad escaping in WikiManager pages (cherry picked from commit 81dc4e862381e088a4d7744442d7a17c1de7e90e) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 81dc4e: XWIKI-24352: Bad escaping in WikiManager pages
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 81dc4e862381e088a4d7744442d7a17c1de7e90e https://github.com/xwiki/xwiki-platform/commit/81dc4e862381e088a4d7744442d7… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-ui/xwiki-platform-wiki-ui-mainwiki/src/main/resources/WikiManager/JoinWiki.xml M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-ui/xwiki-platform-wiki-ui-mainwiki/src/main/resources/WikiManager/WikiActivityServiceCode.xml Log Message: ----------- XWIKI-24352: Bad escaping in WikiManager pages To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-24385: Upgrade to Nu Html Checker 26.5.19
by XWiki Notifications 20 May '26

20 May '26

1 0

[xwiki/xwiki-platform] 21456e: Revert "XWIKI-24385: Upgrade to Nu Html Checker 26...
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/stable-18.4.x Home: https://github.com/xwiki/xwiki-platform Commit: 21456e2d253c2d757817ab6ec4379dfeae1bc78f https://github.com/xwiki/xwiki-platform/commit/21456e2d253c2d757817ab6ec437… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-tools/xwiki-platform-tool-standards-validator/pom.xml Log Message: ----------- Revert "XWIKI-24385: Upgrade to Nu Html Checker 26.5.19" This reverts commit 7b9cf8e0603e7da9d32b2d763344e89f7cb225f7. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 5874e3: Revert "XWIKI-24385: Upgrade to Nu Html Checker 26...
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 5874e3fde4a80e67ccf55df77c667047cba6144f https://github.com/xwiki/xwiki-platform/commit/5874e3fde4a80e67ccf55df77c66… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-tools/xwiki-platform-tool-standards-validator/pom.xml Log Message: ----------- Revert "XWIKI-24385: Upgrade to Nu Html Checker 26.5.19" This reverts commit cb1153fd08fa0ab979e25208abe8e47feeacf910. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] fefd1b: Revert "XWIKI-24385: Upgrade to Nu Html Checker 26...
by XWiki Notifications 20 May '26

20 May '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: fefd1b58917d61d5aa67719ad631c4c1362aa4ba https://github.com/xwiki/xwiki-platform/commit/fefd1b58917d61d5aa67719ad631… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-05-20 (Wed, 20 May 2026) Changed paths: M xwiki-platform-tools/xwiki-platform-tool-standards-validator/pom.xml Log Message: ----------- Revert "XWIKI-24385: Upgrade to Nu Html Checker 26.5.19" This reverts commit fc552fda244e970f6b518ffbd3f4497723bd77ac. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-24387: BlockNote editor fails to load if it cannot connect to the collaboration WebSocket
by XWiki Notifications 20 May '26

20 May '26

1 0