Branch: refs/heads/stable-16.10.x Home: https://github.com/xwiki/xwiki-platform Commit: b029cda76e2b452c780581d583da1bde34d4a3fd https://github.com/xwiki/xwiki-platform/commit/b029cda76e2b452c780581d583da1... Author: Michael Hamann <[email protected]> Date: 2025-02-20 (Thu, 20 Feb 2025) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/objects/classes/ImplicitlyAllowedValuesDBListQueryBuilder.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/objects/classes/ImplicitlyAllowedValuesDBListQueryBuilderTest.java Log Message: ----------- XWIKI-22811: Validate field names in DBList queries * Ensure that the specified fields are actually valid field names * Don't allow password and email fields * Add tests (cherry picked from commit f2ca8649cba2ed3765061660bf5c7f801afa0b24) (cherry picked from commit e1a811896a1ffd6aef349c5c74ceb4f378359cb2) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications