Release Notes for XWiki 14.10.6

Last modified by Ilie Andriuta on 2023/03/28

This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This is a bug fix release that contains several bug fixes including security fixes. As part of these fixes, a new macro for displaying an icon has been introduced.

The following regressions were introduced in this release (and found after it was released). Please check them out and if they impact you we recommend waiting to upgrade to a version where they are fixed.

New and Noteworthy (since XWiki 14.10.5)

Full list of issues fixed and Dashboard for 14.10.6.

Translations

The following translations have been updated: 

Tested Browsers & Databases

Here is the list of browsers we support and how they have been tested for this release:

 BrowserTested on:
Firefox30.pngMozilla Firefox 110Not Tested
Chrome30.pngGoogle Chrome 110Jira Tickets Marked as Fixed in the Release Notes
Edge30.pngMicrosoft Edge 110Not Tested
Safari30.pngSafari 16Not Tested

Here is the list of databases we support and how they have been tested for this release:

 DatabaseTested on:
hypersql.pngHyperSQL 2.7.1Not Tested
postgresql.pngPostgreSQL 15Not Tested
mariadb.pngMariaDB 10.6Not Tested
mysql.pngMySQL 8Not Tested
oracle.pngOracle 19cJira Tickets Marked as Fixed in the Release Notes

Here is the list of Servlet Containers we support and how they have been tested for this release:

 Servlet ContainerTested on:
tomcat-icon.pngTomcat 9.0.73Jira Tickets Marked as Fixed in the Release Notes
jetty-icon.pngJetty 10.0.7 (XWiki Standalone packaging)Not Tested
jetty-icon.pngJetty 10.0.7Not Tested

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

Backward Compatibility and Migration Notes

General Notes

  • When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
    • xwiki.cfg
    • xwiki.properties
    • web.xml
    • hibernate.cfg.xml
  • Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to XWiki 14.10.6

To fix a security vulnerability, restricted HTML cleaning now removes form-related HTML elements (in particular, form, input, select, textarea, and button). This should only affect HTML and raw macros that are authored by users without script right. In case of any issues, they can be allowed again by adding them to the xml.htmlElementSanitizer.extraAllowedTags configuration option in xwiki.properties.

API Breakages

The following APIs were modified since XWiki 14.10.5.

Unstable APIs

Not real backward compatibility breakages since they were done on APIs marked @Unstable (a.k.a Young APIs). Thus it's part of the contract that they can be broken until they become stable. They're listed purely for reference in case you decided to still use them (and thus agreed to be broken).

  • Removed unused method from unstable API.
    • Violation type:
      java.method.removed
    • Code:
      ## Old:
      method void org.xwiki.export.pdf.browser.BrowserTab::setBaseURL(java.net.URL) throws java.io.IOException

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

  • Alex Cotiugă
  • ClemDee
  • Jesse Veentjer
  • Manuel Leduc
  • Marius Dumitru Florea
  • Michael Hamann
  • Sereza7
  • Simon Urli
  • Thomas Mortagne
  • Vincent Massol
Tags:
   

Get Connected