Skip to content
[Jenkins]Jenkins
S'identifier
Succès

Changes

Summary

  1. feature #12562 : Display role on the reassignement page (details)
  2. Bug #14784 (details)
Commit 44aa7d9e88c5be044eb1bdebdc987c163b1bdb4e by Miguel Moquillon
feature #12562 : Display role on the reassignement page
The file was modifiedcore-library/src/main/java/org/silverpeas/core/contribution/content/form/form/XmlForm.java (diff)
Commit ed2e5cc08407d8fab9c5869a9458e6865f830438 by Miguel Moquillon
Bug #14784

Fix the vulnerability by setting a restrictive content security policy
of the HTTP response when serving a file in Silverpeas.
Now, when serving a file, it is done explicitly for download and
not anymore for inlining its content.
The file was modifiedcore-web/src/main/java/org/silverpeas/core/web/http/ServletFileResponse.java (diff)
The file was modifiedcore-web/src/main/java/org/silverpeas/core/web/http/PreparedDownload.java (diff)
The file was modifiedcore-web/src/main/java/org/silverpeas/core/web/http/FileResponse.java (diff)
The file was modifiedcore-web/src/main/java/org/silverpeas/core/web/http/RestFileResponse.java (diff)

Summary

  1. Bug #14784 (details)
  2. Bug #14663 (details)
Commit 20fbed8564c12b79be4c3a508cff654422bee72e by Miguel Moquillon
Bug #14784

Take into account the download of files is now the only and default
behavior in Silverpeas when serving files.
The file was modifiedgallery/gallery-war/src/main/webapp/WEB-INF/tags/silverpeas/gallery/viewMediaLayout.tag (diff)
The file was modifiedgallery/gallery-library/src/main/java/org/silverpeas/components/gallery/constant/GalleryResourceURIs.java (diff)
The file was modifiedgallery/gallery-war/src/main/java/org/silverpeas/components/gallery/servlets/GalleryRequestRouter.java (diff)
The file was modifiedgallery/gallery-war/src/main/webapp/gallery/jsp/mediaPhotoView.jsp (diff)
Commit ea4d2d705c9287940b9c393fd86c29693c6452c0 by Miguel Moquillon
Bug #14663

In Kmelia, when the instance parameter "restrictive suppression" is enabled,
ensure that only the app manager can effectively delete a publication
and can empty the trash.
The file was modifiedkmelia/kmelia-war/src/main/webapp/kmelia/jsp/treeview.jsp (diff)
The file was modifiedkmelia/kmelia-war/src/main/java/org/silverpeas/components/kmelia/control/KmeliaSessionController.java (diff)
The file was modifiedkmelia/kmelia-war/src/main/java/org/silverpeas/components/kmelia/servlets/JSONServlet.java (diff)
The file was modifiedkmelia/kmelia-war/src/main/webapp/kmelia/jsp/simpleListOfPublications.jsp (diff)
The file was modifiedkmelia/kmelia-war/src/main/webapp/kmelia/jsp/basket.jsp (diff)
The file was modifiedkmelia/kmelia-war/src/main/webapp/kmelia/jsp/publicationManager.jsp (diff)