Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-commons Commit: 3e5fbbbb5d7b235a308ec5f94490aeb596b2b142 https://github.com/xwiki/xwiki-commons/commit/3e5fbbbb5d7b235a308ec5f94490ae... Author: Thomas Mortagne <thomas.mortagne@gmail.com> Date: 2026-03-25 (Wed, 25 Mar 2026) Changed paths: M xwiki-commons-core/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/pom.xml M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-api/src/main/java/org/xwiki/environment/Environment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/main/java/org/xwiki/environment/internal/ServletEnvironment.java M xwiki-commons-core/xwiki-commons-environment/xwiki-commons-environment-servlet/src/test/java/org/xwiki/environment/internal/ServletEnvironmentTest.java Log Message: ----------- XCOMMONS-3594: Make a lot easier to protect against resource path traversal (#1675) * add APIs to indicate a folder in which the resource must be located * make Environment API more explicit regarding the fact that they can return null --------- Co-authored-by: Michael Hamann <michael.hamann@xwiki.com> (cherry picked from commit 29194fd29de2d782957e8c7b8a751eab49769614) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications