Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 35539513915b76b1e90f450461f2847f9f50e93b https://github.com/xwiki/xwiki-platform/commit/35539513915b76b1e90f450461f28... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java Log Message: ----------- XWIKI-23891: Resources that are referenced without quotes aren't extracted from CSS WebJar resources during export * Make the regular expression stricter to avoid slow matching. Commit: 9f747fcd3200259a1de51957d3f5f6acc8e3816c https://github.com/xwiki/xwiki-platform/commit/9f747fcd3200259a1de51957d3f5f... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-01-15 (Thu, 15 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-23902: Protect against path traversal from WebJar * Detect path traversal both in URLs in CSS and when copying resources. * Add tests. Compare: https://github.com/xwiki/xwiki-platform/compare/f09edee5761c...9f747fcd3200 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications