v7.1.2

Lutece core 7.1.2

Bug fixes

• LUT-29679 : fix MultipartRequest XSS sanitizing
• LUT-29810 : update getFileStoreServiceProvider to fetch new FileStoreProviders
• LUT-29784 error in script update_db_lutece_core-7.10.-7.1.1.sql: missing a ; on line 8
• LUT-29835 : Fix i18n keys
• LUT-28515 : fix tests
• LUT-28439 - dark mode compatibility : change h1 color

Improvements

• [#16202] / LUTECE-2465 : add auto-imports for freemarker templates in addition to auto-includes
• LUT-28182 : add a confirmation as a notification when a manual workflow action is triggered and correctly processed
• LUT-29679 : Add table sanitizing and unescape @ and + for emails
• LUT-29666 : Add boxHeader's params titleClass and titileParam
• LUT-29775 : Add .truncate class in order to manage long labels

Withdrawals

• LUT-29798 : Externalize extra i18n resources files in library

v7.1.1

Lutece core 7.1.1

New features

• LUT-29675 : Add XSS sanitizer service
• LUT-29679 : Add a sanitizeFilterMode to XSS filters
• LUT-29600 : Add RichTextContentService

Improvements

• LUT-29653 : Add validation message to freemarker input macro
• LUT-29649 : Use RichTextContentService to enable the use of MarkDown rich text editor
• LUT-29574 : access to i18n message bundle resources keys
• LUT-28079 : Updated the hash algorithm used in AccessLogger
• LUT-29394 : Add a new Servlet for Downloading asynchronous file in back office
• LUT-28711 : Improve dark theme
• LUT-29582 : Improve template
• LUT-29494 : Move editor init script inot initEditor macro
• LUT-28387 : Improve properties management template
• LUT-28515 : replace the Message to Admin page with a generic message when reseting password
• LUT-28460 : Error not handled if the size of an uploaded document exceeds the maximum size defined in the web.xml file
• LUT-28580 : Upgrade TinyMCE to latest version 6 and remove TinyMCE oldies
• LUT-29162 : Store in session the origin admin user object provided by the authenticated module
• LUT-29160 : Add a method in Admin Authentication Service to get the name of the autenticate module load

Security fixes

• LUT-29734 : Deletion of the JSP SendResource to prevent the sending of unsolicited emails
• LUT-29577 : SECURITY : SecurityUtil.isInternalRedirectUrlSafe fails to flag external URL, leading to open redirect attack
• LUT-29108 : update commons-io version

Bug fixes

• LUT-29621 : Message displayed when logging out of the back office
• LUT-29190 : Technical settings : user account - default setting - the value "activated" is not taken into account
• LUT-29050 : Update TinyMCE's configuration to prevent the editor from automatically modifying inserted URLs
• LUT-29529 : Users management data presentation KO
• LUT-29666 : formGroup macro display fixes
• LUT-29581 : Fix admin dashboard templates
• LUT-26416 : Indexer : PageIndexer - ERROR : cannot change field "date" from index options=DOCS to inconsistent index options=DOCS_AND_FREQS_AND_POSITIONS
• LUT-29148 : Fix null pointer exception when editing a role
• LUT-29091 : Fixed incorrect event type for logout events in the logs

Withdrawals

• LUT-39671 : remove log and config view page
• LUT-28912 : Remove ambiguous setFileStoreServiceProvider() method
• LUT-29547 : Update key name for login image management in site properties

SQL upgrade scripts

see : src/sql/upgrade/update_db_lutece_core-7.1.0-7.1-1.sql

v7.1.0

Lutece core 7.1.0

(uses lutece-global-pom version 7.0.0 JDK 11)

New features

• LUT-28490 : Security header management admin feature

Improvements

• LUT-2193 : Move DosGuard upload filter configuration from web.xml to lutece.properties
• LUT-28925 : add an "append" method to the Daemon lastRunLogs
• LUT-28795 : Initialize site_name in AppTemplateServiceTest
• LUT-28766 : Add /themes/* to staticFilesCachingFilter core filter
• LUT-28513 : Limit last daemon run log size in daemons page display to avoid timeout issues
• LUT-28548 : Add a way to override default separator in DefaultFileDownloadService
• LUT-28532 : Add FileServiceException management
• LUT-28741 : In DatastoreService, do the prefix search in the SQL query

Bug fixes

• LUT-27514 : Fix minimal header top margin
• LUT-29043 : Fixed mandatory mark not displayed in formLabel macro
• LUT-28733 : add a control over page title length
• LUT-28865 : Wrong value for category.label.auth_admin_FO property
• LUT-26416 : Indexer : PageIndexer - ERROR : cannot change field "url" from index options=DOCS_AND_FREQS_AND_POSITIONS to inconsistent index options=DOCS
• LUT-28741 : Cache prefix lookups
• LUT-28800 : fix email pattern regex + user_level
• LUT-28523 : Test if node selection is not null befoer performing actions
• LUT-28464 : Add missing maxlength param for textarea

Withdrawals

• LUT-29111 : Remove StandAloneApp feature
• LUT-28742 : Removal of PRAGMA headers

SQL upgrade scripts

see : src/sql/upgrade/update_db_lutece_core-7.0.16-7.0.17.sql