Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: f2ca8649cba2ed3765061660bf5c7f801afa0b24 https://github.com/xwiki/xwiki-platform/commit/f2ca8649cba2ed3765061660bf5c7... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2025-02-20 (Thu, 20 Feb 2025) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/objects/classes/ImplicitlyAllowedValuesDBListQueryBuilder.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/internal/objects/classes/ImplicitlyAllowedValuesDBListQueryBuilderTest.java Log Message: ----------- XWIKI-22811: Validate field names in DBList queries * Ensure that the specified fields are actually valid field names * Don't allow password and email fields * Add tests To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications