Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 626e8ee2557985d28e2c91895990ddb8e7e9b7b6 https://github.com/xwiki/xwiki-platform/commit/626e8ee2557985d28e2c91895990d... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-03-06 (Fri, 06 Mar 2026) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/XARImportIT.java M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ImportAdministrationSectionPage.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/ImportAction.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/ImportActionTest.java M xwiki-platform-core/xwiki-platform-test/xwiki-platform-test-ui/src/main/java/org/xwiki/test/ui/TestUtils.java M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/js/xwiki/importer/import.js Log Message: ----------- XWIKI-24093: Missing CSRF token check in ImportAction * Add CSRF token check in import action. * Add unit tests for ImportAction. * Adapt TestUtils to send the token in `importXar`. * Adapt import.js to send the token. * Start modernizing import.js, use fetch instead of Prototype.js. * Improve import.js to display the plain text error message sent by the server. * Add an integration test to verify that the CSRF error is displayed. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications