- notifications - lists.xwiki.org

[xwiki/xwiki-platform] a4d1e9: XWIKI-24357: Improve PasswordClass hash algorithm
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/backport/stable-17.10.x/XWIKI-24357-logs Home: https://github.com/xwiki/xwiki-platform Commit: a4d1e9fe25d815fa130220db02b5ef7e3212477d https://github.com/xwiki/xwiki-platform/commit/a4d1e9fe25d815fa130220db02b5… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/classes/PasswordClass.java Log Message: ----------- XWIKI-24357: Improve PasswordClass hash algorithm * Fix SonarCloud issue (java:S2209): access the static encoders map through a static reference Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] b68e74: XWIKI-25199: PasswordClass related error when logi...
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/backport/stable-18.4.x/XWIKI-25199 Home: https://github.com/xwiki/xwiki-platform Commit: b68e7476cb866f4cf4d9cb28a0e2baebb40f599d https://github.com/xwiki/xwiki-platform/commit/b68e7476cb866f4cf4d9cb28a0e2… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/classes/PasswordClass.java Log Message: ----------- XWIKI-25199: PasswordClass related error when login with Admin after an instance upgrade * Fix SonarCloud issue (java:S2209): access the static encoders map through a static reference Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] fcbf09: XWIKI-23710: The profile button name is being read...
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: fcbf0904c395a3bcfead4be65082ac3433ec7b0c https://github.com/xwiki/xwiki-platform/commit/fcbf0904c395a3bcfead4be65082… Author: LucasC <lucas.charpentier(a)xwiki.com> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/css/users.css M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/drawer.vm M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/less/action-menus.less M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/less/drawer.less M xwiki-platform-core/xwiki-platform-user/xwiki-platform-user-profile/xwiki-platform-user-profile-ui/src/main/resources/XWiki/UserProfileUIX.xml M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-templates/src/main/resources/templates/macros.vm M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/resources/ApplicationResources.properties Log Message: ----------- XWIKI-23710: The profile button name is being read twice by the narrators on Chrome and Edge (#6112) * Hide the avatar's native tooltip from assistive technologies to stop screen readers announcing the username twice * Factorize the profile avatar button and the Drawer's avatar link onto the existing #displayUser() macro * Add "avatarClass" and "displayName" options to #displayUser() * Move avatar sizing/shape styling out of drawer.less into new "large-avatars"/"circle-avatars" modifiers in users.less * Widen two LESS selectors to match #displayUser()'s markup * Add "small-avatar"/"medium-avatar"/"large-avatar" and "circle-avatar" classes to users.less, applied directly on the avatar image instead of on an ancestor container * Use "avatarClass" in the Drawer's avatar link and the profile avatar button instead of container classes * Replace drawer.less's ":first-child" selector with the actual ".user" class * Fix "circle-avatar" rendering as an ellipse for non-square avatar photos by forcing a fixed square box * Add a localized hint for icon-only avatar links generated by #displayUser() * Drop "object-fit: cover" from "circle-avatar" so a non-square photo is squished to fit the square box instead of cropped, keeping the pre-existing fitting behavior and minimizing the visual change - only the box's aspect ratio (now always square) changes, not how the photo is scaled into it * Drop the leftover ".user-avatar"/".group-avatar" margin-right on icon-only avatar links (no visible name to justify it), which was widening the link's box past the avatar image and throwing off anything centered on that box (e.g. the browser's native focus ring) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/XWIKI-25199 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] e8cb7e: XWIKI-25199: PasswordClass related error when logi...
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: e8cb7e6ff46e7f80226d62c9e1dec6ee751c3020 https://github.com/xwiki/xwiki-platform/commit/e8cb7e6ff46e7f80226d62c9e1de… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/classes/PasswordClass.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/internal/migration/R180100000XWIKI23827DataMigration.java A xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/internal/migration/R180900000XWIKI25199DataMigration.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/objects/BaseCollectionTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/objects/classes/PasswordClassTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/org/xwiki/internal/migration/R180100000XWIKI23827DataMigrationTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/org/xwiki/internal/migration/R180800000XWIKI24357DataMigrationTest.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/org/xwiki/internal/migration/R180900000XWIKI25199DataMigrationTest.java Log Message: ----------- XWIKI-25199: PasswordClass related error when login with Admin after an instance upgrade (#6639) * Add R180900000XWIKI25199DataMigration to execute again both migrations, to fix the passwords already put back in their legacy storage * Log the actual legacy algorithm (e.g. SHA-512) instead of XWikiLegacy for passwords not re-encoded yet, and log the reference of the property holding the password instead of the class one * Provide PasswordClass#arePasswordsMatching(String, String, EntityReference) to give the location of the password * Stop logging twice the usage of a deprecated algorithm when computing a hash * Add tests * Only select the objects still holding a StringProperty for one of the password fields in the password storage migration, to avoid processing already migrated objects (e.g. when the migration is executed again) --------- Co-authored-by: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-25203: XWikiCacheStoreInterface#flushCache should always be called after a migration
by XWiki Notifications 08 Oct '26

08 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-15341: getUrlContentAsBytes not using nonProxyHosts
by XWiki Notifications 08 Oct '26

08 Oct '26

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/misc-wysiwyg-extension-index Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/backport/stable-18.4.x/pr-6654 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 9ba069: [Misc] Make the extension index core in the functi...
by XWiki Notifications 08 Oct '26

08 Oct '26

Branch: refs/heads/stable-18.4.x Home: https://github.com/xwiki/xwiki-platform Commit: 9ba069deab240a0f4bae044b6463ba64393d33e7 https://github.com/xwiki/xwiki-platform/commit/9ba069deab240a0f4bae044b6463… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-dashboard/xwiki-platform-dashboard-test/xwiki-platform-dashboard-test-docker/src/test/it/org/xwiki/dashboard/test/ui/DashboardIT.java M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/NavigationIT.java M xwiki-platform-core/xwiki-platform-user/xwiki-platform-user-profile/xwiki-platform-user-profile-test/xwiki-platform-user-profile-test-docker/src/test/it/org/xwiki/user/test/ui/UserProfileIT.java Log Message: ----------- [Misc] Make the extension index core in the functional tests using the WYSIWYG macro list * Add xwiki-platform-extension-index to the `extraJARs` of DashboardIT, NavigationIT and UserProfileIT: the core extension index script service cannot use an extension index installed on the main wiki namespace, so the macro list request logged lookup and Velocity errors Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> (cherry picked from commit f70272883249f6bd3d3dd4243a82ec0662c1a12a) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0