Skip to content
Sign in

Changes

Lancé par une alarme périodique
Started 2 j 5 h ago
Took 2 h 31 mn
Harden the detection of the event callbacks against the vulnerabilities #1458, #1459 and #1460
( cbca010 )
core-web-test/src/main/java/org/silverpeas/web/test/stub/TestHttpRequest.java core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterOnReportedXssIT.java core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java
Miguel Moquillon at
Fix vulnerability #1458
( b8e6d6b )
core-war/src/main/webapp/defaultLoginQuestion.jsp
Miguel Moquillon at
Fix vulnerability #1459
( 661dad8 )
core-services/importExport/src/main/java/org/silverpeas/core/importexport/control/PublicationsTypeManager.java core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java core-configuration/src/main/config/properties/org/silverpeas/util/security.properties core-library/src/integration-test/resources/org/silverpeas/util/security.properties core-library/src/integration-test/java/org/silverpeas/core/test/WarBuilder4LibCore.java core-services/importExport/src/main/java/org/silverpeas/core/importexport/report/HtmlExportPublicationGenerator.java core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentRenderer.java core-library/src/main/java/org/silverpeas/core/contribution/content/form/displayers/WysiwygFCKFieldDisplayer.java core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/directive/SanitizeForRenderingDirective.java core-library/src/integration-test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygControllerIT.java core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformer.java core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java core-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.java
Miguel Moquillon at
Fix vulnerability #1461
( 5ebb413 )
core-library/src/main/java/org/silverpeas/core/util/HttpUtil.java
Miguel Moquillon at
Fix the vulnerabilities CVE-2026-78738 and CVE-2026-78741
( 2ad38c6 )
core-war/src/main/webapp/util/javaScript/silverpeas-fileUpload.js core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterOnReportedXssIT.java
Miguel Moquillon at
Sort only the nodes of the component instance being administrated
( baa73a5 )
core-library/src/integration-test/resources/org/silverpeas/core/node/dao/nodes-sorting-dataset.sql core-web/src/main/java/org/silverpeas/core/webapi/node/ListNodeResource.java core-library/src/integration-test/java/org/silverpeas/core/node/dao/NodeSortingIT.java core-library/src/main/java/org/silverpeas/core/node/dao/NodeDAO.java
Miguel Moquillon at
Take into account sonarcloud feedback
( e43a2cc )
core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/directive/SanitizeForRenderingDirective.java
Miguel Moquillon at
Now the parameter security.external.media.hosts.allowed is empty.
( cc844d3 )
core-configuration/src/main/config/properties/org/silverpeas/util/security.properties
Miguel Moquillon at
Fix bug-15488
( 50d31f7 )
core-library/src/main/java/org/silverpeas/core/index/indexing/model/IndexManager.java core-library/src/main/java/org/silverpeas/core/index/indexing/parser/tika/TikaParser.java core-library/src/main/java/org/silverpeas/core/index/indexing/parser/Parser.java
Miguel Moquillon at
Fix vulnerability #1460
( 6d20d35 )
forums/forums-war/src/main/webapp/forums/jsp/viewMessage.jsp forums/forums-war/src/main/webapp/forums/jsp/editMessageKeywords.jsp forums/forums-war/src/main/webapp/forums/jsp/modifyMessage.jsp
Miguel Moquillon at
Fix vulnerability #1461
( 508c874 )
gallery/gallery-library/src/test/java/org/silverpeas/components/gallery/WatermarkTest.java gallery/gallery-library/src/main/java/org/silverpeas/components/gallery/Watermark.java
Miguel Moquillon at
Fix vulnerability #1462 and secure the other writings of the newsletter
( 249c3e5 )
infoLetter/infoLetter-war/src/main/webapp/infoLetter/jsp/previewLetter.jsp infoLetter/infoLetter-war/src/main/java/org/silverpeas/components/infoletter/servlets/InfoLetterRequestRouter.java infoLetter/infoLetter-war/src/main/webapp/infoLetter/jsp/headerLetter.jsp
Miguel Moquillon at
Fix vulnerabilities #1463
( da97397 )
infoLetter/infoLetter-war/src/main/java/org/silverpeas/components/infoletter/servlets/InfoLetterRequestRouter.java infoLetter/infoLetter-war/src/main/webapp/infoLetter/jsp/listLetterAdmin.jsp infoLetter/infoLetter-war/src/main/webapp/infoLetter/jsp/listLetterUser.jsp
Miguel Moquillon at
Fix vulnerability #1464
( 217fe3e )
kmelia/kmelia-war/src/main/webapp/kmelia/jsp/basket.jsp kmelia/kmelia-war/src/main/webapp/kmelia/jsp/publicationLinksManager.jsp kmelia/kmelia-war/src/main/java/org/silverpeas/components/kmelia/servlets/AjaxServlet.java kmelia/kmelia-war/src/main/java/org/silverpeas/components/kmelia/servlets/ajax/AjaxOperation.java kmelia/kmelia-war/src/main/webapp/kmelia/jsp/orderTopics.jsp
Miguel Moquillon at
Fix vulnerability #939
( b7db955 )
kmelia/kmelia-war/src/main/java/org/silverpeas/components/kmelia/web/KmeliaResource.java kmelia/kmelia-war/src/test/java/org/silverpeas/components/kmelia/web/KmeliaResourceTest.java kmelia/kmelia-war/pom.xml
Miguel Moquillon at
Reserve the management of the delegated news to the managers
( ce910d2 )
delegatednews/delegatednews-war/src/main/java/org/silverpeas/components/delegatednews/web/ListDelegatedNewsResource.java delegatednews/delegatednews-war/src/test/java/org/silverpeas/components/delegatednews/web/ListDelegatedNewsResourceTest.java
Miguel Moquillon at
Take into account sonarcloud feedback
( de9cf86 )
kmelia/kmelia-war/src/main/java/org/silverpeas/components/kmelia/servlets/AjaxServlet.java
Miguel Moquillon at