Branch: refs/heads/backport/stable-18.4.x/pr-6410 Home: https://github.com/xwiki/xwiki-platform Commit: c50623ae9d9b988d367316afb4464f8a3903d357 https://github.com/xwiki/xwiki-platform/commit/c50623ae9d9b988d367316afb4464... Author: Simon Urli <[email protected]> Date: 2026-09-16 (Wed, 16 Sep 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/pom.xml M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-24999: Path traversal protection during WebJar export can be bypassed through a sibling of the export directory * Bulletproof against unlikely path traversal (cherry picked from commit a8b39fa4a938d96e6487486f75ba44fbc2c48870) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications