Branch: refs/heads/stable-17.4.x Home: https://github.com/xwiki/xwiki-platform Commit: da6abaedc3a738bbb730beb6e365ec5e8e4b9c2f https://github.com/xwiki/xwiki-platform/commit/da6abaedc3a738bbb730beb6e365e... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-01-27 (Tue, 27 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java A xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-23891: Resources that are referenced without quotes aren't extracted from CSS WebJar resources during export * Improve the regular expression to detect URLs without quotes. * Make the regular expression for URLs more robust. * Improve the code style by using more try-with-resource statements. * Add a unit test. (cherry picked from commit 1974ab5f1e1f8b3aa74fe00b01efd74cd3a8455d) Commit: 7e0663521603f818504a441e6e7d4da87cd45ac4 https://github.com/xwiki/xwiki-platform/commit/7e0663521603f818504a441e6e7d4... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-01-27 (Tue, 27 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java Log Message: ----------- XWIKI-23891: Resources that are referenced without quotes aren't extracted from CSS WebJar resources during export * Make the regular expression stricter to avoid slow matching. (cherry picked from commit 35539513915b76b1e90f450461f2847f9f50e93b) Commit: 891edaef5e4c840ae4fe99f5bdcb03d12d092257 https://github.com/xwiki/xwiki-platform/commit/891edaef5e4c840ae4fe99f5bdcb0... Author: Michael Hamann <michael.hamann@xwiki.com> Date: 2026-01-27 (Tue, 27 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/main/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopier.java M xwiki-platform-core/xwiki-platform-webjars/xwiki-platform-webjars-api/src/test/java/org/xwiki/webjars/internal/FilesystemResourceReferenceCopierTest.java Log Message: ----------- XWIKI-23902: Protect against path traversal from WebJar * Detect path traversal both in URLs in CSS and when copying resources. * Add tests. (cherry picked from commit 9f747fcd3200259a1de51957d3f5f6acc8e3816c) Compare: https://github.com/xwiki/xwiki-platform/compare/30d9282076e3...891edaef5e4c To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications