{ "_class" : "org.jenkinsci.plugins.workflow.job.WorkflowRun", "actions" : [ { "_class" : "hudson.model.CauseAction", "causes" : [ { "_class" : "hudson.triggers.TimerTrigger$TimerTriggerCause", "shortDescription" : "Lancé par une alarme périodique" } ] }, { "_class" : "hudson.model.ParametersAction", "parameters" : [ { "_class" : "hudson.model.BooleanParameterValue", "name" : "SKIP_TEST", "value" : False }, { "_class" : "hudson.model.BooleanParameterValue", "name" : "SKIP_QUALITY", "value" : False } ] }, { "_class" : "org.jenkinsci.plugins.workflow.libs.LibrariesAction" }, { }, { "_class" : "org.jenkinsci.plugins.workflow.cps.EnvActionImpl" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "56f5661a313b8828cac18f92b68f2f116fbd2cc2", "branch" : [ { "SHA1" : "56f5661a313b8828cac18f92b68f2f116fbd2cc2", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "56f5661a313b8828cac18f92b68f2f116fbd2cc2", "branch" : [ { "SHA1" : "56f5661a313b8828cac18f92b68f2f116fbd2cc2", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "56f5661a313b8828cac18f92b68f2f116fbd2cc2", "branch" : [ { "SHA1" : "56f5661a313b8828cac18f92b68f2f116fbd2cc2", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Jenkins-Pipelines.git" ], "scmName" : "" }, { }, { }, { }, { }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/6.2.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 180, "buildResult" : None, "marked" : { "SHA1" : "45e0d31d27a05fd6c36b5f7bd604a0d05f7f378f", "branch" : [ { "SHA1" : "45e0d31d27a05fd6c36b5f7bd604a0d05f7f378f", "name" : "refs/remotes/origin/6.2.x" } ] }, "revision" : { "SHA1" : "45e0d31d27a05fd6c36b5f7bd604a0d05f7f378f", "branch" : [ { "SHA1" : "45e0d31d27a05fd6c36b5f7bd604a0d05f7f378f", "name" : "refs/remotes/origin/6.2.x" } ] } }, "refs/remotes/origin/6.3.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 302, "buildResult" : None, "marked" : { "SHA1" : "6df43e66c82d74fdaf07c75d56db339cf3491364", "branch" : [ { "SHA1" : "6df43e66c82d74fdaf07c75d56db339cf3491364", "name" : "refs/remotes/origin/6.3.x" } ] }, "revision" : { "SHA1" : "6df43e66c82d74fdaf07c75d56db339cf3491364", "branch" : [ { "SHA1" : "6df43e66c82d74fdaf07c75d56db339cf3491364", "name" : "refs/remotes/origin/6.3.x" } ] } }, "refs/remotes/origin/6.4.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "198ca3ffa05755ef77382ca0e65444a609294d44", "branch" : [ { "SHA1" : "198ca3ffa05755ef77382ca0e65444a609294d44", "name" : "refs/remotes/origin/6.4.x" } ] }, "revision" : { "SHA1" : "198ca3ffa05755ef77382ca0e65444a609294d44", "branch" : [ { "SHA1" : "198ca3ffa05755ef77382ca0e65444a609294d44", "name" : "refs/remotes/origin/6.4.x" } ] } }, "refs/remotes/origin/6.1.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 43, "buildResult" : None, "marked" : { "SHA1" : "a3e9b3a1a829e2b076e72afa8bf8da6253ba6b31", "branch" : [ { "SHA1" : "a3e9b3a1a829e2b076e72afa8bf8da6253ba6b31", "name" : "refs/remotes/origin/6.1.x" } ] }, "revision" : { "SHA1" : "a3e9b3a1a829e2b076e72afa8bf8da6253ba6b31", "branch" : [ { "SHA1" : "a3e9b3a1a829e2b076e72afa8bf8da6253ba6b31", "name" : "refs/remotes/origin/6.1.x" } ] } } }, "lastBuiltRevision" : { "SHA1" : "198ca3ffa05755ef77382ca0e65444a609294d44", "branch" : [ { "SHA1" : "198ca3ffa05755ef77382ca0e65444a609294d44", "name" : "refs/remotes/origin/6.4.x" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Core" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/6.2.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 179, "buildResult" : None, "marked" : { "SHA1" : "6976f0d418d1eb565dded101d00140960944e6aa", "branch" : [ { "SHA1" : "6976f0d418d1eb565dded101d00140960944e6aa", "name" : "refs/remotes/origin/6.2.x" } ] }, "revision" : { "SHA1" : "6976f0d418d1eb565dded101d00140960944e6aa", "branch" : [ { "SHA1" : "6976f0d418d1eb565dded101d00140960944e6aa", "name" : "refs/remotes/origin/6.2.x" } ] } }, "refs/remotes/origin/6.3.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 302, "buildResult" : None, "marked" : { "SHA1" : "f1c18f5b16ecf085b04a36a636aa4aa26ec5d773", "branch" : [ { "SHA1" : "f1c18f5b16ecf085b04a36a636aa4aa26ec5d773", "name" : "refs/remotes/origin/6.3.x" } ] }, "revision" : { "SHA1" : "f1c18f5b16ecf085b04a36a636aa4aa26ec5d773", "branch" : [ { "SHA1" : "f1c18f5b16ecf085b04a36a636aa4aa26ec5d773", "name" : "refs/remotes/origin/6.3.x" } ] } }, "refs/remotes/origin/6.4.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "d221c6c65b1766978f5dd82f28c11c7ceaea9b23", "branch" : [ { "SHA1" : "d221c6c65b1766978f5dd82f28c11c7ceaea9b23", "name" : "refs/remotes/origin/6.4.x" } ] }, "revision" : { "SHA1" : "d221c6c65b1766978f5dd82f28c11c7ceaea9b23", "branch" : [ { "SHA1" : "d221c6c65b1766978f5dd82f28c11c7ceaea9b23", "name" : "refs/remotes/origin/6.4.x" } ] } }, "refs/remotes/origin/6.1.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 43, "buildResult" : None, "marked" : { "SHA1" : "9dbcbf90b830646ccd42fb388d09dbe09ecea4e6", "branch" : [ { "SHA1" : "9dbcbf90b830646ccd42fb388d09dbe09ecea4e6", "name" : "refs/remotes/origin/6.1.x" } ] }, "revision" : { "SHA1" : "9dbcbf90b830646ccd42fb388d09dbe09ecea4e6", "branch" : [ { "SHA1" : "9dbcbf90b830646ccd42fb388d09dbe09ecea4e6", "name" : "refs/remotes/origin/6.1.x" } ] } } }, "lastBuiltRevision" : { "SHA1" : "d221c6c65b1766978f5dd82f28c11c7ceaea9b23", "branch" : [ { "SHA1" : "d221c6c65b1766978f5dd82f28c11c7ceaea9b23", "name" : "refs/remotes/origin/6.4.x" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Components" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/6.2.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 179, "buildResult" : None, "marked" : { "SHA1" : "b3b8a633d5a98083849becc7464aebbca4218501", "branch" : [ { "SHA1" : "b3b8a633d5a98083849becc7464aebbca4218501", "name" : "refs/remotes/origin/6.2.x" } ] }, "revision" : { "SHA1" : "b3b8a633d5a98083849becc7464aebbca4218501", "branch" : [ { "SHA1" : "b3b8a633d5a98083849becc7464aebbca4218501", "name" : "refs/remotes/origin/6.2.x" } ] } }, "refs/remotes/origin/6.3.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 302, "buildResult" : None, "marked" : { "SHA1" : "586ebdd23e10f812e41a52cbf1a3a7f4a81fe924", "branch" : [ { "SHA1" : "586ebdd23e10f812e41a52cbf1a3a7f4a81fe924", "name" : "refs/remotes/origin/6.3.x" } ] }, "revision" : { "SHA1" : "586ebdd23e10f812e41a52cbf1a3a7f4a81fe924", "branch" : [ { "SHA1" : "586ebdd23e10f812e41a52cbf1a3a7f4a81fe924", "name" : "refs/remotes/origin/6.3.x" } ] } }, "refs/remotes/origin/6.4.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "cd3dbdb143c1ba8d859484f154fd760c353dd0ed", "branch" : [ { "SHA1" : "cd3dbdb143c1ba8d859484f154fd760c353dd0ed", "name" : "refs/remotes/origin/6.4.x" } ] }, "revision" : { "SHA1" : "cd3dbdb143c1ba8d859484f154fd760c353dd0ed", "branch" : [ { "SHA1" : "cd3dbdb143c1ba8d859484f154fd760c353dd0ed", "name" : "refs/remotes/origin/6.4.x" } ] } }, "refs/remotes/origin/6.1.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 43, "buildResult" : None, "marked" : { "SHA1" : "070793013d99eb148b16b15d6a191b20b72bc82c", "branch" : [ { "SHA1" : "070793013d99eb148b16b15d6a191b20b72bc82c", "name" : "refs/remotes/origin/6.1.x" } ] }, "revision" : { "SHA1" : "070793013d99eb148b16b15d6a191b20b72bc82c", "branch" : [ { "SHA1" : "070793013d99eb148b16b15d6a191b20b72bc82c", "name" : "refs/remotes/origin/6.1.x" } ] } } }, "lastBuiltRevision" : { "SHA1" : "cd3dbdb143c1ba8d859484f154fd760c353dd0ed", "branch" : [ { "SHA1" : "cd3dbdb143c1ba8d859484f154fd760c353dd0ed", "name" : "refs/remotes/origin/6.4.x" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Looks" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/6.2.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 179, "buildResult" : None, "marked" : { "SHA1" : "abe99f69032413c083fb9ee7a98afc1e2ab5114d", "branch" : [ { "SHA1" : "abe99f69032413c083fb9ee7a98afc1e2ab5114d", "name" : "refs/remotes/origin/6.2.x" } ] }, "revision" : { "SHA1" : "abe99f69032413c083fb9ee7a98afc1e2ab5114d", "branch" : [ { "SHA1" : "abe99f69032413c083fb9ee7a98afc1e2ab5114d", "name" : "refs/remotes/origin/6.2.x" } ] } }, "refs/remotes/origin/6.3.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 302, "buildResult" : None, "marked" : { "SHA1" : "146430cd63566b3be410c8dd534faa57033583b3", "branch" : [ { "SHA1" : "146430cd63566b3be410c8dd534faa57033583b3", "name" : "refs/remotes/origin/6.3.x" } ] }, "revision" : { "SHA1" : "146430cd63566b3be410c8dd534faa57033583b3", "branch" : [ { "SHA1" : "146430cd63566b3be410c8dd534faa57033583b3", "name" : "refs/remotes/origin/6.3.x" } ] } }, "refs/remotes/origin/6.4.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "b329103b18d9998a62da3553abb417ec1327d6e9", "branch" : [ { "SHA1" : "b329103b18d9998a62da3553abb417ec1327d6e9", "name" : "refs/remotes/origin/6.4.x" } ] }, "revision" : { "SHA1" : "b329103b18d9998a62da3553abb417ec1327d6e9", "branch" : [ { "SHA1" : "b329103b18d9998a62da3553abb417ec1327d6e9", "name" : "refs/remotes/origin/6.4.x" } ] } }, "refs/remotes/origin/6.1.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 43, "buildResult" : None, "marked" : { "SHA1" : "62ef5e63f545c1d332fb8e528897aff1fac54150", "branch" : [ { "SHA1" : "62ef5e63f545c1d332fb8e528897aff1fac54150", "name" : "refs/remotes/origin/6.1.x" } ] }, "revision" : { "SHA1" : "62ef5e63f545c1d332fb8e528897aff1fac54150", "branch" : [ { "SHA1" : "62ef5e63f545c1d332fb8e528897aff1fac54150", "name" : "refs/remotes/origin/6.1.x" } ] } } }, "lastBuiltRevision" : { "SHA1" : "b329103b18d9998a62da3553abb417ec1327d6e9", "branch" : [ { "SHA1" : "b329103b18d9998a62da3553abb417ec1327d6e9", "name" : "refs/remotes/origin/6.4.x" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Setup" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/6.2.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 179, "buildResult" : None, "marked" : { "SHA1" : "c96d415a32db2f558555695b382b89c11ac347be", "branch" : [ { "SHA1" : "c96d415a32db2f558555695b382b89c11ac347be", "name" : "refs/remotes/origin/6.2.x" } ] }, "revision" : { "SHA1" : "c96d415a32db2f558555695b382b89c11ac347be", "branch" : [ { "SHA1" : "c96d415a32db2f558555695b382b89c11ac347be", "name" : "refs/remotes/origin/6.2.x" } ] } }, "refs/remotes/origin/6.3.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 302, "buildResult" : None, "marked" : { "SHA1" : "10719018413e414cfa70c0f64a945a72670797f4", "branch" : [ { "SHA1" : "10719018413e414cfa70c0f64a945a72670797f4", "name" : "refs/remotes/origin/6.3.x" } ] }, "revision" : { "SHA1" : "10719018413e414cfa70c0f64a945a72670797f4", "branch" : [ { "SHA1" : "10719018413e414cfa70c0f64a945a72670797f4", "name" : "refs/remotes/origin/6.3.x" } ] } }, "refs/remotes/origin/6.4.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "3c2e5e96c0ee61f807fd61b5d43f84b63ec54298", "branch" : [ { "SHA1" : "3c2e5e96c0ee61f807fd61b5d43f84b63ec54298", "name" : "refs/remotes/origin/6.4.x" } ] }, "revision" : { "SHA1" : "3c2e5e96c0ee61f807fd61b5d43f84b63ec54298", "branch" : [ { "SHA1" : "3c2e5e96c0ee61f807fd61b5d43f84b63ec54298", "name" : "refs/remotes/origin/6.4.x" } ] } }, "refs/remotes/origin/6.1.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 43, "buildResult" : None, "marked" : { "SHA1" : "2c1de09b276e4aa8622563451ebd70a4f24759ce", "branch" : [ { "SHA1" : "2c1de09b276e4aa8622563451ebd70a4f24759ce", "name" : "refs/remotes/origin/6.1.x" } ] }, "revision" : { "SHA1" : "2c1de09b276e4aa8622563451ebd70a4f24759ce", "branch" : [ { "SHA1" : "2c1de09b276e4aa8622563451ebd70a4f24759ce", "name" : "refs/remotes/origin/6.1.x" } ] } } }, "lastBuiltRevision" : { "SHA1" : "3c2e5e96c0ee61f807fd61b5d43f84b63ec54298", "branch" : [ { "SHA1" : "3c2e5e96c0ee61f807fd61b5d43f84b63ec54298", "name" : "refs/remotes/origin/6.4.x" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Distribution" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/6.2.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 179, "buildResult" : None, "marked" : { "SHA1" : "1bdb8f99972aa96dacfc6d8775a7364ab6e845c2", "branch" : [ { "SHA1" : "1bdb8f99972aa96dacfc6d8775a7364ab6e845c2", "name" : "refs/remotes/origin/6.2.x" } ] }, "revision" : { "SHA1" : "1bdb8f99972aa96dacfc6d8775a7364ab6e845c2", "branch" : [ { "SHA1" : "1bdb8f99972aa96dacfc6d8775a7364ab6e845c2", "name" : "refs/remotes/origin/6.2.x" } ] } }, "refs/remotes/origin/6.3.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 302, "buildResult" : None, "marked" : { "SHA1" : "e6cf90efb933ea1d65558af1cade3056ac4b6462", "branch" : [ { "SHA1" : "e6cf90efb933ea1d65558af1cade3056ac4b6462", "name" : "refs/remotes/origin/6.3.x" } ] }, "revision" : { "SHA1" : "e6cf90efb933ea1d65558af1cade3056ac4b6462", "branch" : [ { "SHA1" : "e6cf90efb933ea1d65558af1cade3056ac4b6462", "name" : "refs/remotes/origin/6.3.x" } ] } }, "refs/remotes/origin/6.4.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 574, "buildResult" : None, "marked" : { "SHA1" : "2d8a5e346fd50bd478e8532b3f5d9bfe3457c88e", "branch" : [ { "SHA1" : "2d8a5e346fd50bd478e8532b3f5d9bfe3457c88e", "name" : "refs/remotes/origin/6.4.x" } ] }, "revision" : { "SHA1" : "2d8a5e346fd50bd478e8532b3f5d9bfe3457c88e", "branch" : [ { "SHA1" : "2d8a5e346fd50bd478e8532b3f5d9bfe3457c88e", "name" : "refs/remotes/origin/6.4.x" } ] } }, "refs/remotes/origin/6.1.x" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 43, "buildResult" : None, "marked" : { "SHA1" : "64a1ed5c344bf6e81820366b63120c460193579c", "branch" : [ { "SHA1" : "64a1ed5c344bf6e81820366b63120c460193579c", "name" : "refs/remotes/origin/6.1.x" } ] }, "revision" : { "SHA1" : "64a1ed5c344bf6e81820366b63120c460193579c", "branch" : [ { "SHA1" : "64a1ed5c344bf6e81820366b63120c460193579c", "name" : "refs/remotes/origin/6.1.x" } ] } } }, "lastBuiltRevision" : { "SHA1" : "2d8a5e346fd50bd478e8532b3f5d9bfe3457c88e", "branch" : [ { "SHA1" : "2d8a5e346fd50bd478e8532b3f5d9bfe3457c88e", "name" : "refs/remotes/origin/6.4.x" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Assembly" ], "scmName" : "" }, { }, { "_class" : "hudson.plugins.sonar.action.SonarAnalysisAction", "ceTaskId" : "AaEuydtl_VRRlkU-_mf3", "credentialsId" : None, "installationName" : "Silverpeas SonarCloud", "installationUrl" : "https://sonarcloud.io", "new" : True, "serverUrl" : "https://sonarcloud.io", "skipped" : False, "sonarqubeDashboardUrl" : "https://sonarcloud.io/dashboard?id=Silverpeas_Silverpeas-Core2&branch=6.4.x" }, { }, { }, { }, { }, { "_class" : "hudson.plugins.sonar.action.SonarBuildBadgeAction", "url" : "https://sonarcloud.io/dashboard?id=Silverpeas_Silverpeas-Core2&branch=6.4.x" }, { }, { }, { "_class" : "org.jenkinsci.plugins.displayurlapi.actions.RunDisplayAction" }, { "_class" : "org.jenkinsci.plugins.pipeline.modeldefinition.actions.RestartDeclarativePipelineAction" }, { }, { "_class" : "org.jenkinsci.plugins.workflow.job.views.FlowGraphAction" }, { }, { } ], "artifacts" : [ { "displayPath" : "build.yaml", "fileName" : "build.yaml", "relativePath" : "target/build.yaml" } ], "building" : False, "description" : None, "displayName" : "6.4.9-build261012", "duration" : 7412863, "estimatedDuration" : 5558287, "executor" : None, "fullDisplayName" : "Silverpeas_Stable_AutoDeploy 6.4.9-build261012", "id" : "574", "keepLog" : False, "number" : 574, "queueId" : 68025, "result" : "SUCCESS", "timestamp" : 1791780360714, "url" : "https://integration.silverpeas.org/jenkins/view/Continuous%20Autodeployment%20Build/job/Silverpeas_Stable_AutoDeploy/574/", "changeSets" : [ { "_class" : "hudson.plugins.git.GitChangeSetList", "items" : [ { "_class" : "hudson.plugins.git.GitChangeSet", "affectedPaths" : [ "core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java", "core-api/src/test/java/org/silverpeas/core/security/html/EmbeddedSourceValidatorTest.java", "core-war/src/main/webapp/attachment/jsp/editAttachedFiles.jsp", "core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java", "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java" ], "commitId" : "d9bbf308e876bfbbc480b74aa82f1a2afe938d59", "timestamp" : 1791452716000, "author" : { "absoluteUrl" : "https://integration.silverpeas.org/jenkins/user/mmoquillon", "fullName" : "Miguel Moquillon" }, "authorEmail" : "miguel.moquillon@silverpeas.com", "comment" : "Keep the WYSIWYG images whose source has characters forbidden by the URI syntax\u000a\u000aSince the fix of vulnerability #1459, a WYSIWYG content is sanitized at\u000arendering and the media referring a non-allowed source are dropped. The\u000asource was checked by parsing it as a java.net.URI, so a src with a\u000awhitespace (or any other character the URI syntax forbids) was rejected\u000aand the img element silently disappeared from the rendered content,\u000awhereas the browsers accept such a URL by percent-encoding it themselves.\u000a\u000aEmbeddedSourceValidator now checks a source that isn't a well-formed URI\u000athe way a browser would send it: the characters a browser percent-encodes\u000awithout interpreting them (whitespace, quotes, brackets, braces, ...) are\u000aencoded before the check. The backslashes and the control characters stay\u000arejected, as a browser gives them a meaning of their own, and the percent\u000asign isn't touched so that an encoded path traversal is still detected.\u000a\u000aSuch a src was produced by the \"Browse server\" page of the editor: the\u000aattachment URL was passed through a javascript: href, and a browser\u000apercent-decodes the body of a javascript: URL before running it. The\u000alink now uses an onclick handler, which keeps the URL as served.\u000a\u000aPorted from master (a23ba5c09f) with the hexadecimal formatting of Java 11.\u000a\u000aCo-Authored-By: Claude Fable 5.1 \u000a", "date" : "2026-10-08 11:45:16 +0200", "id" : "d9bbf308e876bfbbc480b74aa82f1a2afe938d59", "msg" : "Keep the WYSIWYG images whose source has characters forbidden by the URI syntax", "paths" : [ { "editType" : "edit", "file" : "core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java" }, { "editType" : "edit", "file" : "core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java" }, { "editType" : "add", "file" : "core-api/src/test/java/org/silverpeas/core/security/html/EmbeddedSourceValidatorTest.java" }, { "editType" : "edit", "file" : "core-war/src/main/webapp/attachment/jsp/editAttachedFiles.jsp" }, { "editType" : "edit", "file" : "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java" } ] }, { "_class" : "hudson.plugins.git.GitChangeSet", "affectedPaths" : [ "core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java", "core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/directive/SanitizeForRenderingDirective.java", "core-web/src/test/resources/org/silverpeas/util/security.properties", "core-web/src/main/java/org/silverpeas/core/web/filter/OpeningTag.java", "core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java", "core-configuration/src/main/config/properties/org/silverpeas/util/security.properties", "core-web/src/test/java/org/silverpeas/core/web/filter/ScriptCheckerTest.java", "core-api/src/test/java/org/silverpeas/core/security/html/EmbeddedSourceValidatorTest.java", "core-web/src/main/java/org/silverpeas/core/web/filter/ScriptChecker.java", "core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java", "core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.java", "core-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.java", "core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java", "core-web/src/integration-test/resources/org/silverpeas/util/security.properties", "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java" ], "commitId" : "9a5e4924a0c6c703395947a3a87c3e8f82fab971", "timestamp" : 1791547224000, "author" : { "absoluteUrl" : "https://integration.silverpeas.org/jenkins/user/mmoquillon", "fullName" : "Miguel Moquillon" }, "authorEmail" : "miguel.moquillon@gmail.com", "comment" : "Bug #15502 Allow again the scripts in the WYSIWYG contents for trusted source\u000a\u000aSince 6.4.7, the content of the WYSIWYG editor is checked against the XSS\u000ainjections like any other request parameter, and the contents are sanitized\u000awhen rendered or exported. Any script was then both rejected by\u000aMassiveWebSecurityFilter and dropped by SanitizeForRenderingDirective, whereas\u000aour customers use scripts to make their web pages dynamic (webPages\u000aapplication).\u000a\u000aA script is now accepted, at both ends, provided it carries no code by itself\u000aand it loads it from an allowed source. The rule on the sources is the one\u000aalready applied to the iframes and to the media (EmbeddedSourceValidator):\u000athe Silverpeas application is always allowed, the external hosts have to be\u000adeclared, by HTTPS only. For the scripts they are declared by the new property\u000asecurity.external.script.hosts.allowed, empty by default.\u000a\u000aThis shared rule is refined: the weblib web application, which serves beside\u000aSilverpeas the resources specific to the platform, is now always allowed too,\u000afor the scripts as well as for the iframes and the media.\u000a\u000aThe files attached to the contributions are uploaded by the users themselves,\u000aso a script loading its code from one of them is refused unless the new\u000aproperty security.script.attachments.allowed is explicitly set to true (false\u000aby default, no value being equivalent to false). The routes of the file\u000aservers are concerned, among which the permalink of a file as it redirects to\u000ait. The iframes aren't concerned: an attached file, like a PDF document, can\u000astill be embedded, the file servers serving it along with a content security\u000apolicy forbidding it any script.\u000a\u000aOn the filter side, a script is accepted only when it is strictly parsed: a\u000awell-formed opening tag with a single src attribute, directly followed by its\u000aclosing tag. A closing tag alone is still rejected. On the rendering side,\u000awhatever an allowed script carries by itself is dropped.\u000a\u000aFix also a bypass of the filter on the source of the iframes: the HTML\u000aentities were decoded as the HTML 4 ones only, whereas the browsers know far\u000amore of them and decode them even loosely written. So a source such as\u000a\"https://www.evil.org/\" was taken for a relative URL within Silverpeas.\u000aThe attribute values are now decoded by the decoder of the OWASP sanitizer,\u000athe one by which the contents being rendered are read, so that both ends read\u000aa source the same way. The strict parsing of an opening tag is extracted from\u000aIFrameChecker into OpeningTag in order to be shared with ScriptChecker.\u000a\u000aCo-Authored-By: Claude Fable 5.1 \u000a", "date" : "2026-10-09 14:00:24 +0200", "id" : "9a5e4924a0c6c703395947a3a87c3e8f82fab971", "msg" : "Bug #15502 Allow again the scripts in the WYSIWYG contents for trusted source", "paths" : [ { "editType" : "edit", "file" : "core-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.java" }, { "editType" : "edit", "file" : "core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java" }, { "editType" : "edit", "file" : "core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java" }, { "editType" : "edit", "file" : "core-api/src/test/java/org/silverpeas/core/security/html/EmbeddedSourceValidatorTest.java" }, { "editType" : "add", "file" : "core-web/src/main/java/org/silverpeas/core/web/filter/ScriptChecker.java" }, { "editType" : "edit", "file" : "core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java" }, { "editType" : "edit", "file" : "core-configuration/src/main/config/properties/org/silverpeas/util/security.properties" }, { "editType" : "edit", "file" : "core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.java" }, { "editType" : "add", "file" : "core-web/src/test/java/org/silverpeas/core/web/filter/ScriptCheckerTest.java" }, { "editType" : "add", "file" : "core-web/src/main/java/org/silverpeas/core/web/filter/OpeningTag.java" }, { "editType" : "edit", "file" : "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java" }, { "editType" : "edit", "file" : "core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/directive/SanitizeForRenderingDirective.java" }, { "editType" : "edit", "file" : "core-web/src/test/resources/org/silverpeas/util/security.properties" }, { "editType" : "edit", "file" : "core-web/src/integration-test/resources/org/silverpeas/util/security.properties" }, { "editType" : "edit", "file" : "core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java" } ] }, { "_class" : "hudson.plugins.git.GitChangeSet", "affectedPaths" : [ "core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java", "core-web/src/test/java/org/silverpeas/core/web/filter/XssCheckerTest.java", "core-web/src/main/java/org/silverpeas/core/web/filter/exception/WebXssInjectionSecurityException.java", "core-web/src/main/java/org/silverpeas/core/web/filter/XssPatternChecker.java", "core-web/src/main/java/org/silverpeas/core/web/filter/OpeningTag.java", "core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java", "core-web/src/main/java/org/silverpeas/core/web/filter/XssChecker.java", "core-web/src/test/java/org/silverpeas/core/web/filter/ScriptCheckerTest.java", "core-web/src/main/java/org/silverpeas/core/web/filter/SecurityChecker.java", "core-web/src/main/java/org/silverpeas/core/web/filter/ScriptChecker.java", "core-web/src/main/java/org/silverpeas/core/web/filter/SecurityCheckerProvider.java", "core-web/src/test/java/org/silverpeas/core/web/filter/XssPatternCheckerTest.java", "core-web/src/main/java/org/silverpeas/core/web/filter/exception/WebSecurityException.java", "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java", "core-web/src/main/java/org/silverpeas/core/web/filter/MessageFilter.java" ], "commitId" : "198ca3ffa05755ef77382ca0e65444a609294d44", "timestamp" : 1791553299000, "author" : { "absoluteUrl" : "https://integration.silverpeas.org/jenkins/user/mmoquillon", "fullName" : "Miguel Moquillon" }, "authorEmail" : "miguel.moquillon@silverpeas.com", "comment" : "Bug #15502 Tell the reason for which a value is rejected as a XSS injection\u000a\u000aA rejected request was answered and logged with the sole generic message\u000a\"Attempt of a XSS injection detected\", so neither the writer of a content nor\u000aan administrator could know what to fix. The case that revealed it is a\u000aself-closing script tag,