SKIP_TESTfalseSKIP_QUALITYfalseDémarré par l'utilisateur Miguel MoquillonmmoquillonMiguel Moquillon1150b3a0a7bf423a3407c3bc6980f30a0c6ee678b5aeb3a0a7bf423a3407c3bc6980f30a0c6ee678b5aerefs/remotes/origin/masterb3a0a7bf423a3407c3bc6980f30a0c6ee678b5aeb3a0a7bf423a3407c3bc6980f30a0c6ee678b5aerefs/remotes/origin/masterb3a0a7bf423a3407c3bc6980f30a0c6ee678b5aeb3a0a7bf423a3407c3bc6980f30a0c6ee678b5aerefs/remotes/origin/masterhttps://github.com/Silverpeas/Jenkins-Pipelines.git26196a3a41e61a0a59a294dd74fce10884c559e77f496a3a41e61a0a59a294dd74fce10884c559e77f4refs/remotes/origin/sonarqube96a3a41e61a0a59a294dd74fce10884c559e77f496a3a41e61a0a59a294dd74fce10884c559e77f4refs/remotes/origin/sonarqube1150ff9903432f6445500447bed914a01e155efc5353ff9903432f6445500447bed914a01e155efc5353refs/remotes/origin/masterff9903432f6445500447bed914a01e155efc5353ff9903432f6445500447bed914a01e155efc5353refs/remotes/origin/masterff9903432f6445500447bed914a01e155efc5353ff9903432f6445500447bed914a01e155efc5353refs/remotes/origin/masterhttps://github.com/Silverpeas/Silverpeas-Core1150da97a0aafea25b96dbdb5a8fa0979e7f48773132da97a0aafea25b96dbdb5a8fa0979e7f48773132refs/remotes/origin/masterda97a0aafea25b96dbdb5a8fa0979e7f48773132da97a0aafea25b96dbdb5a8fa0979e7f48773132refs/remotes/origin/masterda97a0aafea25b96dbdb5a8fa0979e7f48773132da97a0aafea25b96dbdb5a8fa0979e7f48773132refs/remotes/origin/masterhttps://github.com/Silverpeas/Silverpeas-Components11502af94364967e82de1e8d70f466e8367b044216882af94364967e82de1e8d70f466e8367b04421688refs/remotes/origin/master2af94364967e82de1e8d70f466e8367b044216882af94364967e82de1e8d70f466e8367b04421688refs/remotes/origin/master2af94364967e82de1e8d70f466e8367b044216882af94364967e82de1e8d70f466e8367b04421688refs/remotes/origin/masterhttps://github.com/Silverpeas/Silverpeas-Looks1150ed6bdc22b8581b07c1e09d74558a2feb664e126bed6bdc22b8581b07c1e09d74558a2feb664e126brefs/remotes/origin/mastered6bdc22b8581b07c1e09d74558a2feb664e126bed6bdc22b8581b07c1e09d74558a2feb664e126brefs/remotes/origin/mastered6bdc22b8581b07c1e09d74558a2feb664e126bed6bdc22b8581b07c1e09d74558a2feb664e126brefs/remotes/origin/masterhttps://github.com/Silverpeas/Silverpeas-Setup1150c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbcc0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbcrefs/remotes/origin/masterc0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbcc0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbcrefs/remotes/origin/masterc0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbcc0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbcrefs/remotes/origin/masterhttps://github.com/Silverpeas/Silverpeas-Distribution11500ff3db7ef2fa887e276200aea5587cde84dd56bd0ff3db7ef2fa887e276200aea5587cde84dd56bdrefs/remotes/origin/master0ff3db7ef2fa887e276200aea5587cde84dd56bd0ff3db7ef2fa887e276200aea5587cde84dd56bdrefs/remotes/origin/master0ff3db7ef2fa887e276200aea5587cde84dd56bd0ff3db7ef2fa887e276200aea5587cde84dd56bdrefs/remotes/origin/masterhttps://github.com/Silverpeas/Silverpeas-AssemblyAaCfaNoDXgE6qZtOJxDESilverpeas SonarCloudhttps://sonarcloud.iotruehttps://sonarcloud.iofalsehttps://sonarcloud.io/dashboard?id=Silverpeas_Silverpeas-Core2&branch=masterAaCfihG-I3z4HI9aNq6zSilverpeas SonarCloudhttps://sonarcloud.iotruehttps://sonarcloud.iofalsehttps://sonarcloud.io/dashboard?id=Silverpeas_Silverpeas-Components&branch=masterbuild.yamlbuild.yamltarget/build.yamlfalse6.5-build26091489564096032580Silverpeas_Master_AutoDeploy 6.5-build2609141150false115059487SUCCESS1789374846986https://integration.silverpeas.org/jenkins/view/Continuous%20Autodeployment%20Build/job/Silverpeas_Master_AutoDeploy/1150/core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.javacore-library/src/test/java/org/silverpeas/core/index/indexing/model/LastUpdateDateSearchTest.javacore-web/src/test/resources/org/silverpeas/util/security.propertiescore-war/src/main/webapp/WEB-INF/tags/silverpeas/util/displayExternalIframe.tagcore-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.javacore-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.javacore-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.javacore-web/src/integration-test/resources/org/silverpeas/util/security.propertiescore-configuration/src/main/config/properties/org/silverpeas/util/security.propertiescore-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.javaff9903432f6445500447bed914a01e155efc53531789374831000https://integration.silverpeas.org/jenkins/user/mmoquillonMiguel Moquillonmiguel.moquillon@silverpeas.comFix bug #15431 Allow iframes in the data sent to Silverpeas when they refer trusted sources MassiveWebSecurityFilter no longer blocks every iframe. An iframe is now allowed if its single src attribute refers either: - an HTTPS URL whose host is the Silverpeas server or one of the hosts set in the new security.external.iframe.hosts.allowed property, or - a relative URL within the Silverpeas application, without any path traversal attempt (even encoded). Any iframe that cannot be strictly parsed, or that has a srcdoc attribute, is still rejected. The JSON bodies of requests are now decoded before the injection checks, so that they are done on the text as it will be taken by Silverpeas. The iframe checking is done by the new IFrameChecker class, covered by unit tests. MassiveWebSecurityFilterIT is also completed. 2026-09-14 10:33:51 +0200ff9903432f6445500447bed914a01e155efc5353Fix bug #15431editcore-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.javaeditcore-war/src/main/webapp/WEB-INF/tags/silverpeas/util/displayExternalIframe.tagaddcore-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.javaeditcore-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.javaeditcore-web/src/test/resources/org/silverpeas/util/security.propertieseditcore-library/src/test/java/org/silverpeas/core/index/indexing/model/LastUpdateDateSearchTest.javaeditcore-web/src/integration-test/resources/org/silverpeas/util/security.propertiesaddcore-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.javaeditcore-configuration/src/main/config/properties/org/silverpeas/util/security.propertieseditcore-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.javagithttps://integration.silverpeas.org/jenkins/user/mmoquillonMiguel Moquillonfalse1149https://integration.silverpeas.org/jenkins/view/Continuous%20Autodeployment%20Build/job/Silverpeas_Master_AutoDeploy/1149/