Bug
- [XWIKI-5155] - HTTP header injection via xredirect
- [XWIKI-7163] - Resolving of an extension artifact from a maven repository seems to cause unexpected persistence of its POM information
- [XWIKI-9551] - When you delete a user from the main wiki it is not deleted from the subwiki groups
- [XWIKI-10168] - Source metadata should be set to a document reference after parsing any content related to a document
- [XWIKI-10261] - Solr "Creator" facet title does not get translated
- [XWIKI-10264] - 2 different versions of guava are found as core extensions
- [XWIKI-10282] - The content from a document is not visible when editing in WYSIWYG on IE10
- [XWIKI-10283] - Adding content (images, links, table, macros) is not working anymore in WYSIWYG on IE10
- [XWIKI-10286] - XWiki#exists returns false for document translations
- [XWIKI-10289] - "java.lang.IllegalArgumentException: Comparison method violates its general contract!" on Java 7
- [XWIKI-10290] - Empty HQL query throws exception
- [XWIKI-10297] - Page history produced by rest service is empty on Oracle
- [XWIKI-10315] - Programming right does not imply wiki create right
- [XWIKI-10320] - New XSS in the user profile
- [XWIKI-10326] - XSS/Phishing vulnerability in the attachment selector
- [XWIKI-10328] - Authentication cookies should be marked as Secure
Task
- [XWIKI-10256] - Upgrade to Apache Lucene and Solr 4.7.2
- [XWIKI-10295] - Upgrade to Jython 2.7-b2
Improvement
- [XWIKI-9373] - Extend HqlQueryExecutor to use setParameterList for list type parameters passed with bindValue
- [XWIKI-10074] - FAQ.FAQSearch page should be hidden
- [XWIKI-10253] - Fix AppWithinMinutes in Flamingo Skin
- [XWIKI-10262] - Manage the RenderingContext when running transformations outside of the TransformationManager
- [XWIKI-10266] - Prevent command line scripts from closing their window under Windows
- [XWIKI-10268] - SOLR startup sychronization should use less requests
Edit/Copy Release Notes
The text area below allows the project release notes to be edited and copied to another document.