Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • stable-16.10.x
  • XWIKI-21417
  • stable-17.2.x
  • feature-deploy-removehttpclient3
  • dependabot/npm_and_yarn/xwiki-platform-core/xwiki-platform-livedata/xwiki-platform-livedata-webjar/src/main/config/http-proxy-middleware-2.0.9
  • XWIKI-23115
  • stable-16.4.x
  • dependabot/npm_and_yarn/xwiki-platform-core/xwiki-platform-notifications/xwiki-platform-notifications-webjar/src/main/vue/vite-6.2.6
  • backport/stable-16.10.x/pr-3933
  • dependabot/npm_and_yarn/xwiki-platform-core/xwiki-platform-notifications/xwiki-platform-notifications-webjar/src/main/vue/vite-6.2.5
  • XWIKI-22804
  • surli-patch-1
  • dependabot/npm_and_yarn/xwiki-platform-core/xwiki-platform-notifications/xwiki-platform-notifications-webjar/src/main/vue/vite-6.2.4
  • stable-14.10.x
  • XWIKI-22978-2
  • XWIKI-22978
  • XWIKI-23019
  • dependabot/npm_and_yarn/xwiki-platform-core/xwiki-platform-notifications/xwiki-platform-notifications-webjar/src/main/vue/vite-6.2.3
  • XWIKI-20528
  • xwiki-platform-17.2.2
  • xwiki-platform-17.2.1
  • xwiki-platform-17.2.0
  • xwiki-platform-17.2.0-rc-1
  • xwiki-platform-16.10.5
  • xwiki-platform-16.4.7
  • xwiki-platform-17.1.0
  • xwiki-platform-16.10.4
  • xwiki-platform-17.1.0-rc-1
  • xwiki-platform-16.10.3
  • xwiki-platform-17.0.0
  • xwiki-platform-17.0.0-rc-1
  • xwiki-platform-15.10.16
  • xwiki-platform-16.10.2
  • xwiki-platform-16.4.6
  • xwiki-platform-16.10.1
  • xwiki-platform-15.10.15
  • xwiki-platform-16.10.0
  • xwiki-platform-16.10.0-rc-1
  • xwiki-platform-15.10.14
40 results
Compare
user avatar
XWIKI-21949: Restrict the execution of script macros during a realtime WYSIWYG editing session
Marius Dumitru Florea authored 
* Fix a bug in EntityChannelScriptAuthorTracker which didn't lower / update the script level when the target entity reference had initially a low script level (e.g. when two users edit a page whose last author didn't have script right, one of them could use the rights of the other to execute scripts)
* Assume that a request can submit data associated with multiple documents (or document translations) so don't try to determine the entity that is targeted by the request; simply compute the effective author by taking the most recent author with the least script rights
* Update since versions

(cherry picked from commit fa1c0fb1)
de094b22
History
user avatar de094b22
History
Name Last commit Last update
.github
.mvn
xwiki-platform-core
xwiki-platform-distribution
xwiki-platform-tools
.gitattributes
.gitignore
.lgtm.yml
CONTRIBUTING.md
Jenkinsfile
JenkinsfileEnvironmentTests
LICENSE
README.md
SECURITY.md
pom.xml
README.md

XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.

XWiki Commons, XWiki Rendering, and XWiki Platform are part of the XWiki.org software forge. They are released together and share the same version.

Documentation

Download

Read our Download and Installation instructions.

Release Notes

Read our Release Notes.

Tools

Community

We're always looking for contributors! You should read our Get Involved Guide or get in touch: