This issue has been created
There is 1 update.
 
 
XWiki Platform / cid:jira-generated-image-avatar-7d29b316-766f-4642-866c-1af789c9197b XWIKI-23816 Open

Add checks in BaseCollection#setXXXValue to ensure the type of the field is correct

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-ba4391e0-094b-4ba6-acd9-9aa7eda97d1d Simon Urli created this issue on 11/Dec/25 18:12
 
Summary: Add checks in BaseCollection#setXXXValue to ensure the type of the field is correct
Issue Type: cid:jira-generated-image-avatar-7d29b316-766f-4642-866c-1af789c9197b Improvement
Affects Versions: 17.10.0
Assignee: Unassigned
Components: Old Core
Created: 11/Dec/25 18:12
Priority: cid:jira-generated-image-static-major-065cb7c8-839c-4218-bcb2-f5ad52cd3945 Major
Reporter: Simon Urli
Description:

There's currently no check at all performed when calling BaseCollection#setXXXValue to ensure that the XXX matches the actual field type: for example, it's possible to create a static list field with multiselect false and call setStringListValue with multiple values to put in it. Which shouldn't be authorized at all from API PoV.

 
 

1 update

 
cid:jira-generated-image-avatar-ba4391e0-094b-4ba6-acd9-9aa7eda97d1d Changes by Simon Urli on 11/Dec/25 18:12
 
Assignee: Simon Urli