Branch: refs/heads/backport/stable-16.10.x/XCOMMONS-3594 Home: https://github.com/xwiki/xwiki-commons Commit: 946ab59a3a19d0852cfdf3f307616ce35ee156a4 https://github.com/xwiki/xwiki-commons/commit/946ab59a3a19d0852cfdf3f307616c... Author: Thomas Mortagne <[email protected]> Date: 2026-10-09 (Fri, 09 Oct 2026) Changed paths: M xwiki-commons-core/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/test/java/org/xwiki/environment/internal/ServletEnvironmentTest.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal (#1675) * add APIs to indicate a folder in which the resource must be located * make Environment API more explicit regarding the fact that they can return null --------- Co-authored-by: Michael Hamann <[email protected]> (cherry picked from commit 29194fd29de2d782957e8c7b8a751eab49769614) (cherry picked from commit 3e5fbbbb5d7b235a308ec5f94490aeb596b2b142) Commit: 31bdba055b87aa57747bc8b1fa74165df7a92459 https://github.com/xwiki/xwiki-commons/commit/31bdba055b87aa57747bc8b1fa7416... Author: Thomas Mortagne <[email protected]> Date: 2026-10-09 (Fri, 09 Oct 2026) Changed paths: M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal * add missing sonar ignore (cherry picked from commit 2297b3db3edf004cdc8c936f3828f0d103c65274) (cherry picked from commit bd53e4e90cd857aa6dde7861df97edbb14bf927b) Commit: 2d0d141b8a77bf2e456883eb086dfde8f042247e https://github.com/xwiki/xwiki-commons/commit/2d0d141b8a77bf2e456883eb086dfd... Author: Thomas Mortagne <[email protected]> Date: 2026-10-09 (Fri, 09 Oct 2026) Changed paths: M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal * also add helpers for getting the modification date (when possible) (cherry picked from commit 04ee3544cc00456ff45049a575c49b6f97145a5e) (cherry picked from commit 0a1db3cecda85de38b7d931a798e2533bb3c4e93) Commit: dfda1ec15bcbd42bf7bb78faf52c0be29d8c753f https://github.com/xwiki/xwiki-commons/commit/dfda1ec15bcbd42bf7bb78faf52c0b... Author: Thomas Mortagne <[email protected]> Date: 2026-10-09 (Fri, 09 Oct 2026) Changed paths: M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal * add 16.10.20 to the @since of the backported APIs Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> Compare: https://github.com/xwiki/xwiki-commons/compare/946ab59a3a19%5E...dfda1ec15bc... To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications