Skip to content
Sign in
Succès

Changes

Fix bug #15388. This regression comes from the fix of the vulnerability #15358. So, after fixing the regression, to fix the vulnerability, now any values passed through custom HTTP request headers are now checked against XSS and SQL injections
( 1113f19 )
core-war/src/main/webapp/util/javaScript/silverpeas-fileUpload.js core-war/src/main/webapp/util/javaScript/silverpeas-ddUpload.js core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java core-web/src/main/java/org/silverpeas/core/webapi/upload/FileUploadData.java core-war/src/main/webapp/attachment/jsp/displayAttachedFiles.jsp core-web/src/main/java/org/silverpeas/core/webapi/attachment/SimpleDocumentResourceCreator.java
Miguel Moquillon at
bug #15382 : CSV Export is now available for all items on the detail user & group admin page.
( f5ace7a )
core-war/src/main/webapp/jobDomainPeas/jsp/userContent.jsp core-war/src/main/webapp/jobDomainPeas/jsp/groupContent.jsp
Miguel Moquillon at
bug #15385 : sonar feedbacks, refactoring javascript checks.
( 66a1bb9 )
core-war/src/main/webapp/util/javaScript/checkForm.js
Miguel Moquillon at
bug #15382 : Adjust of Export CSV pictogram on all arraypanes on the group and the user rights
( ca4c4d2 )
core-war/src/main/webapp/util/styleSheets/silverpeas-main.css
Miguel Moquillon at
bug #15385 : Show the penalty clue field as mandatory if the clue field is filled.
( e7a8566 )
quizz/quizz-war/src/main/webapp/quizz/jsp/questionCreatorBis.jsp quizz/quizz-war/src/main/webapp/quizz/jsp/questionCreator.jsp quizz/quizz-war/src/main/webapp/quizz/jsp/javascript/question.js quizz/quizz-war/src/main/webapp/quizz/jsp/styleSheets/quizz.css
Miguel Moquillon at
Add the Apache Commons Text in the dependencies so that it can be used by the Groovy scripts in the Silvprpeas installation process
( 95ef186 )
build.gradle
Miguel Moquillon at
Bug #15370: add Groovy script to replace in all WYSIWYG contents the accentuated characters encoded in HTML by their UTF-8 counterparts
( a6905cf )
src/main/dist/configuration/silverpeas/01-updateWYSIWYGContents.groovy
Miguel Moquillon at