Branch: refs/heads/stable-17.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 6992f881713de69ce7d9fef1e831b61d4dd79a12 https://github.com/xwiki/xwiki-platform/commit/6992f881713de69ce7d9fef1e831b... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-03-09 (Mon, 09 Mar 2026) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/XARImportIT.java M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ImportAdministrationSectionPage.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/ImportAction.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/ImportActionTest.java M xwiki-platform-core/xwiki-platform-test/xwiki-platform-test-ui/src/main/java/org/xwiki/test/ui/TestUtils.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/js/xwiki/importer/import.js Log Message: ----------- XWIKI-24093: Missing CSRF token check in ImportAction * Add CSRF token check in import action. * Add unit tests for ImportAction. * Adapt TestUtils to send the token in `importXar`. * Adapt import.js to send the token. * Start modernizing import.js, use fetch instead of Prototype.js. * Improve import.js to display the plain text error message sent by the server. * Add an integration test to verify that the CSRF error is displayed. (cherry picked from commit 626e8ee2557985d28e2c91895990ddb8e7e9b7b6) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications