- Mar 29, 2024
-
-
Thomas Mortagne authored
-
Thomas Mortagne authored
XWIKI-21219: Add a preparation/compilation pass to the document content and title
-
- Mar 28, 2024
-
-
Simon Urli authored
* Remove all usages of ControlCharacterFilter as it's been removed in xwiki-commons-xml as part of the upgrade
-
Vincent Massol authored
-
Vincent Massol authored
-
Simon Urli authored
XWIKI-22042: Mail Prepare Thread error still occurs in some cases when triggering the mail sending job from Scheduler * Bulletproof usage of #createDocumentDiff by ensuring the docs are not null before calling it * Fix related test
-
Manuel Leduc authored
-
Manuel Leduc authored
-
- Mar 27, 2024
-
-
Thomas Mortagne authored
-
Thomas Mortagne authored
-
Pierre Jeanjean authored
-
Simon Urli authored
Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by:
Manuel Leduc <manuel.leduc@xwiki.com>
-
Simon Urli authored
* Fix integration tests
-
- Mar 25, 2024
-
-
Thomas Mortagne authored
-
Oana-Lavinia Florean authored
-
Marius Dumitru Florea authored
* Fix two regressions introduced in previous commits (in-place editor starts readonly and the selection is not properly restored when the macro wizard is used). (cherry picked from commit 144c02bb)
-
- Mar 24, 2024
-
-
Marius Dumitru Florea authored
* Improve a bit the performance by reducing the number of local changes that need to be rebased when a remote change is received. * Fix console logging. (cherry picked from commit 5244301b)
-
- Mar 22, 2024
-
-
Thomas Mortagne authored
-
Thomas Mortagne authored
-
Simon Urli authored
XWIKI-21991: Mail Prepare Thread error occurred in some cases when triggering the mail sending job from Scheduler * Fix page test to not include UserDefaultComponentList everywhere because it's causing regression in modules where user-default is not pulled
-
- Mar 21, 2024
-
-
Thomas Mortagne authored
-
Thomas Mortagne authored
* remove unused imports
-
dependabot[bot] authored
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.4...v1.15.6 ) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
Mend Renovate authored
-
Mend Renovate authored
-
Mend Renovate authored
-
LucasC authored
* Add missing indentation * Rename a template variable to be more explicit and understandable
-
Mend Renovate authored
-
LucasC authored
XWIKI-22010: The rights buttons for Unregistered Users do not display anymore the value set after page refresh (#3006) * Replace the string value when calling MSCheckbox for guest users with an int value, like it is done for any other user
-
Thomas Mortagne authored
* remove unused import
-
Marius Dumitru Florea authored
* Update the existing functional tests. * Increase a bit the "error" margin for the auto-save timeout to avoid some rare test failure. * Proper wait for the realtime editor to be ready before starting typing.
-
Marius Dumitru Florea authored
* Make Editor#contentUpdated() async because it may trigger a content refresh (if macros are affected) in which case we need to be able to wait for the content to be rendered server-side. * Synchronize editors on the output HTML (what is sent to the server to be converted to wiki syntax). Everything that is not included in the output HTML (e.g. macro output for macros that are not editable inline, user state such as selected widget) is considered a local change that needs to be rebased on top of all received remote changes. * Make setHyperJSON async because it needs to wait for the content to be updated (e.g. server-side rendering in case of a macro change). * Detect if a remote change inserts a new macro or modifies the parameters of an existing macro * Drop content normalization (for now) and rely instead on rebasing local changes that are not shared. * Improve the rebase transformation to better preserve intention (logic) and to reduce the risk of getting invalid JSON as a result. * Wait for the Saver and User Data to be ready before allowing the user to type. * "Pause" the realtime sync while the editor is waiting for server-side rendering of macros, and then perform a merge before resuming the realtime sync. * Re-fetch the channel keys when re-joining the realtime session because the channels may have been closed in the mean time (if they were ever created).
-
Marius Dumitru Florea authored
* Make sure we use a single (same) WebSocket connection for all our channels (all events, content, saver, user data). * Make it possible to wait for the Saver and User Data connections to be ready.
-
Marius Dumitru Florea authored
* Overwrite CKEditor#setReadOnly to better handle "nesting" (e.g. if two async processes make the editor read-only and then restore it, we want the restore to happen only after both processes trigger it). * Improve the xwiki-refresh command: ** Add a onceAfterRefresh helper that covers a recurring need to execute some code after a refresh command is executed. ** We should be able to execute the refresh command when the editor is read-only. Moreover, the refresh command doesn't need to focus the editor and it doesn't depend on the current selection. ** Add an option to the refresh command to skip preserving the selection (the code executing the refresh command may want to control how the selection is preserved). ** Notify the refresh is done only after the macro widgets are ready for user interaction. * Improve macro insertion: ** Wait for the editor to be ready before inserting a macro (e.g. if a refresh is currently being executed as a result of a remote change that inserted a new macro or modified the parameters of an exisiting one). ** Take into account that the widget for which we opened the Macro Edit Modal might not exist anymore after we submit the modal because the edited content has been refreshed in the mean time. If the selection was preserved we can try to find again the edited widget. ** Place the caret inside the first nested editable (that corresponds to a macro parameter or content), if the macro is editable inline, otherwise select the inserted macro. * The realtime editor needs to know when the editor is being locked/unlocked (i.e. in loading state). * Fix getOutputHTML to return only the edited content (without any wrapping), in order to have consistency between standalone and in-place edit mode. * Don't trigger change events (for realtime) when the editor is read-only (there may be some intermediary states that we don't wan to synchronize). * When the content is updated as a result of a remote change we need to detect if that change inserted a new macro or modified the parameters of an existing macro. If that is the case then we need to refresh the content.
-
Marius Dumitru Florea authored
* Improve the RichTextAreaElement PO: ** When waiting for some HTML content or text we need to take into account that the editable content (including the root) can be reloaded, e.g. as a result of inserting or updating a macro (posibly from a remote change). ** I couldn't find a cross browser way to type text into the rich text area that reproduces the real user interaction, especially when dealing with nested editable areas (for in-line editable macros), so I had to write code specific to Firefox and Chrome.
-
Marius Dumitru Florea authored
* Implement hashCode and equals for EntityChannel to be able to use it properly in hash-based collections.
-
pjeanjean authored
-
Michael Hamann authored
XWIKI-20632: Page searched by its exact name is not found in a page picker for a macro parameter when its subtree is larger than 10 pages (#2945) * Search only in the actual page name, not in the space hierarchy. * Add tests.
-
Pierre Jeanjean authored
XWIKI-9046: Renaming a document holding a lot of revisions can lead to an OutOfMemory exception (#2926) * Only load last node when updating the document archive * Add a basic test
-
Simon Urli authored
XWIKI-13915: $xwiki.getConfiguredSyntaxes() not equals to $services.rendering.getConfiguredSyntaxes() * Change implementation of legacy XWiki#getConfiguredSyntaxes to rely on ExtendedRenderingConfiguration#getConfiguredSyntaxes
-