Branch: refs/heads/stable-16.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 26b2ec478d576e45fe7de10354cea3b93f760ae8 https://github.com/xwiki/xwiki-platform/commit/26b2ec478d576e45fe7de10354cea... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-06-09 (Tue, 09 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/XARImportIT.java M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ImportAdministrationSectionPage.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/ImportAction.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/ImportActionTest.java M xwiki-platform-core/xwiki-platform-test/xwiki-platform-test-ui/src/main/java/org/xwiki/test/ui/TestUtils.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/js/xwiki/importer/import.js Log Message: ----------- XWIKI-24093: Missing CSRF token check in ImportAction * Add CSRF token check in import action. * Add unit tests for ImportAction. * Adapt TestUtils to send the token in `importXar`. * Adapt import.js to send the token. * Start modernizing import.js, use fetch instead of Prototype.js. * Improve import.js to display the plain text error message sent by the server. * Add an integration test to verify that the CSRF error is displayed. (cherry picked from commit 626e8ee2557985d28e2c91895990ddb8e7e9b7b6) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications