Changes for page Release Notes for XWiki 5.2 Milestone 2
Last modified by Thomas Mortagne on 2017/03/24
Change comment:
styling
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -129,8 +129,9 @@ 129 129 130 130 == Choosing which types of attachments can be displayed inline (Security) == 131 131 132 -In order to prevent XSS via FileUpload, a new feature has been added : you can now specify in xwiki.properties which types of attachment can be displayed inline. 133 -In the "Attachment" section of xwiki.properties, you can either precise a whitelist of mimetypes that can be displayed inline, or precise a blacklist of mimetypes that shouldn't be displayed inline (if you use this configuration, it is strongly advised to blacklist at least "text/html" and "text/javascript" mimetypes for security reasons). 132 +In order to prevent XSS via FileUpload, a new feature has been added: you can now specify in ##xwiki.properties## which types of attachment can be displayed inline. 133 +In the "Attachment" section of ##xwiki.properties##, you can either precise a whitelist of mimetypes that can be displayed inline, or precise a blacklist of mimetypes that shouldn't be displayed inline (if you use this configuration, it is strongly advised to blacklist at least ##text/html## and ##text/javascript## mimetypes for security reasons). 134 + 134 134 Note that attachments provided by users having Programming Rights won't be affected by these restrictions. 135 135 136 136 == Miscellaneous == ... ... @@ -163,11 +163,9 @@ 163 163 164 164 == General Notes == 165 165 166 - Youmay also want to [[import thedefault wiki XAR>>Main.Download]] in orderto benefit fromallthe improvementslisted above.167 +== General Notes == 167 167 168 -{{warning}} 169 -Always make sure you compare your ##xwiki.cfg## and ##xwiki.properties## files with the newest version since some configuration parameters were added. Note that you should add ##xwiki.store.migration=1## so that XWiki will attempt to automatically migrate your current database to the new schema. Make sure you backup your Database before doing anything. 170 -{{/warning}} 169 +When upgrading make sure you compare your ##xwiki.cfg##, ##xwiki.properties## and ##web.xml## files with the newest version since some configuration parameters may have been modified or added. Note that you should add ##xwiki.store.migration=1## so that XWiki will attempt to automatically migrate your current database to the new schema. Make sure you backup your Database before doing anything. 171 171 172 172 == Issues specific to XWiki 5.2 Milestone 2 == 173 173 ... ... @@ -178,6 +178,8 @@ 178 178 ... 179 179 {{/code}} 180 180 ))) 180 +* If you're upgrading from XWiki 4.5.x to this version you'll need to perform a full re-indexation when using the SOLR Search. This because in XWiki 4.5.x the SOLR search was experimental and we've completely changed the indexing 181 +format in XWiki 5.1. 181 181 182 182 == API Breakages == 183 183