- notifications - lists.xwiki.org

[xwiki/xwiki-platform] 0126a7: XWIKI-22726: Allow customizing the validation of H...
by XWiki Notifications 10 Dec '24

10 Dec '24

Branch: refs/heads/feature-XWIKI-22726 Home: https://github.com/xwiki/xwiki-platform Commit: 0126a71b88bf4800de68add1693fb46b8fde1c4f https://github.com/xwiki/xwiki-platform/commit/0126a71b88bf4800de68add1693f… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2024-12-10 (Tue, 10 Dec 2024) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/hibernate/query/HqlQueryExecutor.java A xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/ConfigurableHQLQueryValidator.java A xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/DefaultHQLQueryValidator.java A xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/HQLQueryValidator.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/store/hibernate/query/HqlQueryExecutorTest.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-22726: Allow customizing the validation of HQL queries through configuration To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-20331: RCE payloads stored in comments and profile are executed when admin user edits them.
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20519: Mail.MailConfig can be edited by any user with edit rights
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20333: Retrieve email addresses of all users
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20334: Move documents from victim profile to attacker profile
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20336: Read notification filters of other users
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20380: It's possible to execute anything with any author through Document#getAuthors()
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20335: RXSS with authenticate endpoints
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20337: Delete/edit the custom filters of other users
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0

[[email protected]][Issue] Updates for XWIKI-20339: RXSS in URL path - /xwiki/bin/delattachment/XWiki/<USER>/<PAYLOAD>
by XWiki Notifications 10 Dec '24

10 Dec '24

1 0