Skip to content
Snippets Groups Projects
  1. Nov 02, 2021
  2. Oct 26, 2021
  3. Oct 15, 2021
  4. Aug 30, 2021
  5. Aug 17, 2021
  6. Jul 20, 2021
  7. Jun 28, 2021
  8. May 24, 2021
  9. May 17, 2021
  10. Apr 30, 2021
  11. Apr 26, 2021
    • Vincent Massol's avatar
      [Misc] Split xwiki-platform-web into 2 modules: xwiki-platform-web-templates... · e273b632
      Vincent Massol authored
      [Misc] Split xwiki-platform-web into 2 modules: xwiki-platform-web-templates and xwiki-platform-web-war. Rationale: be able to write integration tests for templates more easily (by depending on the new template module rather than having to unpack the WAR, and use a modified velocity engine to read templates from local files)
      * Update artifact id used in java code
      e273b632
    • Vincent Massol's avatar
      [Misc] Split xwiki-platform-web into 2 modules: xwiki-platform-web-templates... · bc6fb452
      Vincent Massol authored
      [Misc] Split xwiki-platform-web into 2 modules: xwiki-platform-web-templates and xwiki-platform-web-war. Rationale: be able to write integration tests for templates more easily (by depending on the new template module rather than having to unpack the WAR, and use a modified velocity engine to read templates from local files)
      bc6fb452
  12. Apr 21, 2021
  13. Apr 19, 2021
  14. Apr 15, 2021
    • Simon Urli's avatar
      XWIKI-10309: Check URL domains based on a whitelist (#1592) · 5251c020
      Simon Urli authored
      Introduce a new property for listing the trusted domains and API to
      check an URL against that list and the aliases used in subwikis.
      
        * Add new property url.trustedDomains in xwiki.properties
        * Add new API in URLConfiguration to retrieve this configuration value
        * Create a new URLSecurityManager responsible to check if an URL can
          be trusted based on this property and on the subwikis configurations
        * Introduce a new listener to invalidate the cache of
          URLSecurityManager whenever a XWikiServerClass xobject is
      added/updated/deleted
        * Move URL API implementations to URL default module
        * Add a new property url.enableTrustedDomains as a global switch off the
          checks on domains to avoid breaking behaviours on existing instances
        * Add a constant property in URLSecurityManager to be set in
          ExecutionContext to allow temporary switch off the check for
      extensions
        * Use both those switches in DefaultURLSecurityManager to prevent
          performing the check when needed
      5251c020
  15. Mar 30, 2021
  16. Mar 22, 2021
  17. Feb 15, 2021
  18. Feb 08, 2021
  19. Feb 02, 2021
  20. Jan 28, 2021
  21. Jan 26, 2021
  22. Jan 19, 2021
  23. Dec 28, 2020
  24. Dec 21, 2020
  25. Dec 13, 2020
  26. Nov 25, 2020
  27. Nov 20, 2020
  28. Nov 09, 2020
  29. Nov 05, 2020
Loading