December 2015 - xwiki-devs@xwiki.org

[xwiki-devs] [ANN] XWiki 7.4 released
by Guillaume "Louis-Marie" Delhumeau 28 Dec '15

28 Dec '15

The XWiki development team is proud to announce the availability of XWiki 7.4. This is our last stabilization release for the XWiki 7.x cycle and the new Long Term Support (LTS) version. It mainly brings polishing and stabilization for the Nested Pages feature, especially in the UI. Among other things, this release introduces a new notifications menu with the watchlist actions inside. Application Within Minutes now creates a *Code* and a *Data* page where the application content is stored. And it is now possible to have template hierarchies and to add an redirection when a page is renamed. You can download it here: http://www.xwiki.org/xwiki/bin/view/Main/Download Make sure to review the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki74 The following people have contributed code to this release (sorted alphabetically): * Andreas Jonsson * Clemens Robbenhaar * Ecaterina Moraru (Valica) * Eduard Moraru * Guillaume Delhumeau * Jean SIMARD * Manuel Smeria * Marius Dumitru Florea * Sergiu Dumitriu * Thomas Mortagne * Vincent Massol Thanks for your support -The XWiki dev team

1 0

[xwiki-devs] Contribute to the macro-map extension
by Zoubir Medjdoub 23 Dec '15

23 Dec '15

Hello devs, I'm Zoubir Medjdoub, web developer at XWiki SAS. I'm an Algeria engineer, I want to contribute to the macro-map extension and this is my github ID: zoubir. Thanks in advance for looking into my request

2 1

[xwiki-devs] [ANN] XWiki 7.4 Release Candidate 1 released
by vincent＠massol.net 22 Dec '15

22 Dec '15

The XWiki development team is proud to announce the availability of XWiki 7.4 Release Candidate 1. This is our last stabilization branch for the XWiki 7.x Cycle. It brings polishing and stabilization for the Nested Pages feature and the changes in UI that resulted from it. You can download it here: http://www.xwiki.org/xwiki/bin/view/Main/Download Make sure to review the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki74RC1 The following people have contributed code to this release (sorted alphabetically): Guillaume Delhumeau Sergiu Dumitriu Marius Dumitru Florea Vincent Massol Thomas Mortagne Thanks for your support -The XWiki dev team

1 0

[xwiki-devs] [Contrib] Jira project for a new Syntax Highlighting Module
by Yann Flory 18 Dec '15

18 Dec '15

Hello devs, In order to be able to use the CodeMirror editor in other extensions, we'd like to split the Syntax Highlighting application in two parts (Cf http://jira.xwiki.org/browse/WIKIEDITOR-37) A new extension, Syntax Highlighting UI Module, would be created and it would provides the ability to transform a given textarea into a CodeMirror editor. The current extension would keep the part which detect all textareas in 'edit' mode and transform them into CodeMirror editors (with a dependency on the new extension). If this is accepted, we'll need a new Jira project for the module. Thanks, Yann

5 15

[xwiki-devs] [ANN] File Manager 2.0.5 released
by Marius Dumitru Florea 18 Dec '15

18 Dec '15

A new version of the File Manager Application that works with the most recent versions of XWiki (7.2+) is now available. You can see here the list of bugs that have been fixed: http://extensions.xwiki.org/xwiki/bin/view/Extension/File+Manager+Applicati… Enjoy, Marius

1 0

[xwiki-devs] [VOTE] Move Autocompletion and Syntax Highlighting extensions into xwiki-platform
by vincent＠massol.net 18 Dec '15

18 Dec '15

Hi devs, We’ve said that we wanted to move non core modules outside of xwiki-platform. However there are 2 modules that are currently in xwiki-contrib that I’d like us take into xwiki-platform: Autocompletion and Syntax Highlighting extensions. Rationale: * They’re tech modules and not vertical modules * We need to offer some good core dev tools to users developing in the wiki * I think they complement well AWM (and possibly any future WebIDE we could also have in platform) * We need to work on them and make them production-ready (they’re close to that). If Edy is ok, I’d be willing to work with him to maintain those modules (anyone is welcome to help of course but at least we could start by being the 2 maintainers of that module to make sure that they continue working as XWiki progresses). WDYT? Here’s my +1 Thanks -Vincent

4 3

[xwiki-devs] [Proposal] Plan for the coming month
by vincent＠massol.net 18 Dec '15

18 Dec '15

Hi devs, I’m going on holidays this afternoon and I’ll be back on the 2nd of Jan (I’ll also won’t be able to refrain from checking emails and working on the side). Here’s what I’m proposing that we do from now to end of January: * Next Monday: Release of 7.4RC1. Who can release it? It would be nice that it’s someone other than Guillaume D since he’s been releasing 7.4M2 and he’ll be releasing 7.4 final on the 28th. * 28th of Dec: Release of 7.4 final * Leftover of 7.4 regarding bugs and Nested Spaces is carried over for point releases of 7.4: 7.4.1 and 7.4.2 for now. * 2nd of Jan: start working on XWiki 8.0 :) I’ll make a roadmap proposal for 8.0 on the 8th of Jan (ideally should have done it earlier but I’m late). Regarding content, I already know that Marius is going to work on improving the CKEditor extension to fix known issues. We also need to start doing some cleanup (remove @unstable that have expired, move to Java 8, etc). * 11th of Jan: Release of 7.4.1: content: bug fixes + Nested Spaces leftovers + tools to help user migrate their content from Parent-Child to Nested Spaces. * 25th of Jan: Release of 7.4.2: content: bug fixes + Nested Spaces leftovers + tools to help user migrate their content from Parent-Child to Nested Spaces. WDYT? Is that ok? I wish everyone a very nice Christmas and for those on holidays, some nice holidays! :) Thanks -Vincent

2 3

[xwiki-devs] [Security] Found important vulnerability in deprecated XML-RPC feature
by vincent＠massol.net 17 Dec '15

17 Dec '15

Hi XWiki users and devs, An important security issue in the XML-RPC module of XWiki (http://extensions.xwiki.org/xwiki/bin/view/Extension/XML-RPC+Integration) was brought to our attention by a community member (thanks Ruben Herold). Specifically if your wiki is available on the internet, it’s possible that an intruder may have had access to local files that can be read by the user under which you’ve started the Servlet Container used for XWiki. Note 1: The issue actually comes from the version of the Apache XMLRPC module we were using (https://ws.apache.org/xmlrpc/) It’s been fixed in the latest version (3.1.3). We were using version 3.1. Note 2: ThE XWiki XMLRPC module has been deprecated for a long time now (was replaced by REST) but it was still enabled till XWiki 7.3M1: * In XWiki 7.3M1 we’ve turned off that feature * In XWiki 7.4M2 we’ve removed it altogether by default We recommend that you either upgrade to XWiki 6.4.7, 7.1.4 or 7.3+ or that you turn-off the XML-RPC feature on your wiki **especially if your wiki is open on the internet**. Turning it off is easy: edit XWiki’s META-INF/web.xml file and comment out or remove the following sections: ... <!--filter-mapping> <filter-name>XWikiXmlRpcContextInitializationFilter</filter-name> <servlet-name>xmlrpc</servlet-name> <dispatcher>REQUEST</dispatcher> <dispatcher>INCLUDE</dispatcher> <dispatcher>FORWARD</dispatcher> </filter-mapping—> ... <!--servlet> <servlet-name>xmlrpc</servlet-name> <servlet-class>com.xpn.xwiki.xmlrpc.XWikiXmlRpcServlet</servlet-class> <init-param> <description>Sets, whether the servlet supports vendor extensions for XML-RPC.</description> <param-name>enabledForExtensions</param-name> <param-value>false</param-value> </init-param> </servlet—> ... <!--servlet-mapping> <servlet-name>xmlrpc</servlet-name> <url-pattern>/xmlrpc/*</url-pattern> </servlet-mapping—> … Sorry for the inconvenience. Thanks -Vincent Massol on behalf of the XWiki Core dev team PS: If you need to discuss more about this security issue we recommend that you use XWiki’s security list, see http://dev.xwiki.org/xwiki/bin/view/Community/MailingLists

1 1

[xwiki-devs] [ANN] XWiki 7.1.4 released
by Ecaterina Moraru (Valica) 17 Dec '15

17 Dec '15

The XWiki development team is proud to announce the availability of XWiki 7.1.4. This is a bugfix release that fixes important bugs discovered in the 7.1.3 version. We also retired the XML-RPC Integration since it led to security vulnerabilities. You can download it using these links: JAR: http://download.forge.ow2.org/xwiki/xwiki-enterprise-installer-generic-7.1.… EXE: http://download.forge.ow2.org/xwiki/xwiki-enterprise-installer-windows-7.1.… ZIP: http://download.forge.ow2.org/xwiki/xwiki-enterprise-jetty-hsqldb-7.1.4.zip WAR: http://download.forge.ow2.org/xwiki/xwiki-enterprise-web-7.1.4.war XAR: http://download.forge.ow2.org/xwiki/xwiki-enterprise-ui-mainwiki-all-7.1.4.… Make sure to review the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki714 The following people have contributed code to this release (sorted alphabetically): Ecaterina Moraru (Valica) Eduard Moraru Marius Dumitru Florea Thomas Mortagne Vincent Massol Thanks for your support -The XWiki dev team

2 1

[xwiki-devs] [ANN] XWiki 6.4.7 released
by vincent＠massol.net 17 Dec '15

17 Dec '15

The XWiki Core Development team is proud to announce the availability of XWiki 6.4.7. This is a bugfix release that fixes important bugs discovered in the 6.4.6 version. We also retired the XML-RPC Integration> (http://extensions.xwiki.org/xwiki/bin/view/Extension/XML-RPC+Integration) since it led to security vulnerabilities. We highly recommend upgrading (or turn off the XML-RPC feature, see http://extensions.xwiki.org/xwiki/bin/view/Extension/XML-RPC+Integration) especially if your wiki is open on the Internet. You can download it here: http://www.xwiki.org/xwiki/bin/view/Main/Download Make sure to review the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki647 The following people have contributed code to this release (sorted alphabetically): Marius Dumitru Florea Denis Gervalle Vincent Massol Eduard Moraru Thomas Mortagne Thanks for your support -The XWiki Core dev team

1 0