March 2026 - notifications - lists.xwiki.org

[xwiki/xwiki-commons] 3e5fbb: XCOMMONS-3594: Make a lot easier to protect agains...
by XWiki Notifications 25 Mar '26

25 Mar '26

Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-commons Commit: 3e5fbbbb5d7b235a308ec5f94490aeb596b2b142 https://github.com/xwiki/xwiki-commons/commit/3e5fbbbb5d7b235a308ec5f94490a… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-03-25 (Wed, 25 Mar 2026) Changed paths: M xwiki-commons-core/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/test/java/org/xwiki/environment/internal/ServletEnvironmentTest.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal (#1675) * add APIs to indicate a folder in which the resource must be located * make Environment API more explicit regarding the fact that they can return null --------- Co-authored-by: Michael Hamann <michael.hamann(a)xwiki.com> (cherry picked from commit 29194fd29de2d782957e8c7b8a751eab49769614) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-commons] f5c2dd: XCOMMONS-3594: Make a lot easier to protect agains...
by XWiki Notifications 25 Mar '26

25 Mar '26

Branch: refs/heads/stable-18.2.x Home: https://github.com/xwiki/xwiki-commons Commit: f5c2dd01a9e3cd4ee0c329441c9cc657e5fad444 https://github.com/xwiki/xwiki-commons/commit/f5c2dd01a9e3cd4ee0c329441c9cc… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-03-25 (Wed, 25 Mar 2026) Changed paths: M xwiki-commons-core/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/test/java/org/xwiki/environment/internal/ServletEnvironmentTest.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal (#1675) * add APIs to indicate a folder in which the resource must be located * make Environment API more explicit regarding the fact that they can return null --------- Co-authored-by: Michael Hamann <michael.hamann(a)xwiki.com> (cherry picked from commit 29194fd29de2d782957e8c7b8a751eab49769614) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-platform] f7b337: XCOMMONS-3594, XWIKI-24075: Make a lot easier to p...
by XWiki Notifications 25 Mar '26

25 Mar '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: f7b33704083d3b4e45d1b9fc1e2cc33c66855f85 https://github.com/xwiki/xwiki-platform/commit/f7b33704083d3b4e45d1b9fc1e2c… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-03-25 (Wed, 25 Mar 2026) Changed paths: M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/AllIT.java A xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/SkinActionIT.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/XWiki.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/skin/AbstractResourceSkin.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/skin/ClassLoaderSkin.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/skin/EnvironmentSkin.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/template/InternalTemplateManager.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/SkinAction.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/skin/ClassLoaderSkinTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/skin/EnvironmentSkinTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/skin/InternalSkinManagerTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/template/InternalTemplateManagerTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/template/TemplateManagerTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/test/AbstractBridgedComponentTestCase.java A xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/WEB-INF/resourcecheck/README.txt A xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/WEB-INF/resourcecheck/a%61b A xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/WEB-INF/resourcecheck/aab Log Message: ----------- XCOMMONS-3594, XWIKI-24075: Make a lot easier to protect against resource path traversal * update various resource access using the new tooling To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-commons] 29194f: XCOMMONS-3594: Make a lot easier to protect agains...
by XWiki Notifications 25 Mar '26

25 Mar '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-commons Commit: 29194fd29de2d782957e8c7b8a751eab49769614 https://github.com/xwiki/xwiki-commons/commit/29194fd29de2d782957e8c7b8a751… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-03-25 (Wed, 25 Mar 2026) Changed paths: M xwiki-commons-core/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/test/java/org/xwiki/environment/internal/ServletEnvironmentTest.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal (#1675) * add APIs to indicate a folder in which the resource must be located * make Environment API more explicit regarding the fact that they can return null --------- Co-authored-by: Michael Hamann <michael.hamann(a)xwiki.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24158: Enable realtime editing for BlockNote editor
by XWiki Notifications 25 Mar '26

25 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24159: Implement a client-side component manager
by XWiki Notifications 25 Mar '26

25 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-17921: Refactor Livedata API to be cleaner and more flexible
by XWiki Notifications 25 Mar '26

25 Mar '26

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-17627: Livedata Add entry from layout
by XWiki Notifications 25 Mar '26

25 Mar '26

1 0

[xwiki/xwiki-commons] 7889a7: XCOMMONS-3594: Make a lot easier to protect agains...
by XWiki Notifications 25 Mar '26

25 Mar '26

Branch: refs/heads/feature-pathtraversalhelper Home: https://github.com/xwiki/xwiki-commons Commit: 7889a7654ea37b8ca62dbc2dabbbc0b7fb7ff9d5 https://github.com/xwiki/xwiki-commons/commit/7889a7654ea37b8ca62dbc2dabbbc… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-03-25 (Wed, 25 Mar 2026) Changed paths: M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/test/java/org/xwiki/environment/internal/ServletEnvironmentTest.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal * update since annotation * fix cache handling bug To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[jira@xwiki.org][Issue] Updates for XWIKI-24157: Use directly the BlockNote syntax instead of going through UniAst
by XWiki Notifications 25 Mar '26

25 Mar '26

1 0