March 2026 - notifications - lists.xwiki.org

[xwiki/xwiki-platform] 6992f8: XWIKI-24093: Missing CSRF token check in ImportAction
by XWiki Notifications 09 Mar '26

09 Mar '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 6992f881713de69ce7d9fef1e831b61d4dd79a12 https://github.com/xwiki/xwiki-platform/commit/6992f881713de69ce7d9fef1e831… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-03-09 (Mon, 09 Mar 2026) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/XARImportIT.java M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ImportAdministrationSectionPage.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/ImportAction.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/ImportActionTest.java M xwiki-platform-core/xwiki-platform-test/xwiki-platform-test-ui/src/main/java/org/xwiki/test/ui/TestUtils.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/js/xwiki/importer/import.js Log Message: ----------- XWIKI-24093: Missing CSRF token check in ImportAction * Add CSRF token check in import action. * Add unit tests for ImportAction. * Adapt TestUtils to send the token in `importXar`. * Adapt import.js to send the token. * Start modernizing import.js, use fetch instead of Prototype.js. * Improve import.js to display the plain text error message sent by the server. * Add an integration test to verify that the CSRF error is displayed. (cherry picked from commit 626e8ee2557985d28e2c91895990ddb8e7e9b7b6) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24087: Inconsistent 'Language' field value when inserting Code Macro in different ways
by XWiki Notifications 09 Mar '26

09 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for CONFLUENCE-513: Clean up local-id attributes
by XWiki Notifications 09 Mar '26

09 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for CONFLUENCE-512: Set the context for inline comments imported as annotations
by XWiki Notifications 09 Mar '26

09 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for CONFLUENCE-513: Clean up local-id attributes
by XWiki Notifications 09 Mar '26

09 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24098: Add a Tomcat 11 based Debian package
by XWiki Notifications 09 Mar '26

09 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24097: Add a "root parent children" navigation panel
by XWiki Notifications 08 Mar '26

08 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24096: Some macros don't execute properly when editing the source of a page in the inplace editor and saving directly from there
by XWiki Notifications 08 Mar '26

08 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24095: Siblings panel seems to display children when displayed for a non-terminal page
by XWiki Notifications 08 Mar '26

08 Mar '26

1 0

[xwiki-contrib/cristal-integration-nextcloud]
by XWiki Notifications 07 Mar '26

07 Mar '26

Branch: refs/heads/dependabot/npm_and_yarn/fast-xml-parser-5.4.1 Home: https://github.com/xwiki-contrib/cristal-integration-nextcloud To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/cristal-integration-nextcloud/settings/not…

1 0