eXo-JCR-core

Clone Tools
  • last updated a few minutes ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
COR-349: Concurrent issue of ConversationState

[PLF-6276] Upgrade dependencies to next snapshots

[maven-release-plugin] [PLF-6276]prepare for next development iteration

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[maven-release-plugin] [PLF-6276]prepare release 2.5.13-GA

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[PLF-6276] Upgrade dependencies to latest releases

[PLF-6220]: Update dependencies

[maven-release-plugin] [PLF-6220]prepare for next development iteration

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[maven-release-plugin] [PLF-6220]prepare release 2.5.12-GA

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[PLF-6220] Upgrade dependencies to latest releases

JCR-2381 : Update foundation parent pom

Merge pull request #38 from exodev/fix/2.5.12-GA/JCR-2381

JCR-2381 : Update foundation parent pom

JCR-2381 : Update foundation parent pom

Merge branch 'fix/2.5.12-GA/COR-338' into stable/2.5.x

COR-338: Add XXE unit test - External Entity points to non-existing resource

PLF-6122: Update dependencies to next snapshot

[maven-release-plugin] [PLF-6112]prepare for next development iteration

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[maven-release-plugin] [PLF-6112]prepare release 2.5.11-GA

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[PLF-6112] Upgrade dependencies to latest releases

COR-333: TikaDocumentReader causes 'Unparseable date'

Fix description:

* Don't convert date value extracted from document's properties to String of Java's Date object. This format doesn't conform to ISO8601 standard used in JCR

    • -29
    • +1
    /exo.core.component.document/pom.xml
    • binary
    /exo.core.component.document/src/test/resources/testDate.pptx
    • binary
    /exo.core.component.document/src/test/resources/testDate.xlsx
COR-339: Test failures with Oracle java >= 1.7.0_25

Problem analysis:

* Oracle Java 1.7.0_25 has a security improvement of java.security.AccessController.doPrivileged(PrivilegedAction, AccessControlContext) and java.security.AccessController.doPrivileged(PrivilegedExceptionAction, AccessControlContext).

When a security manager is installed, the AccessControlContext is not created by system code and the caller's ProtectionDomain has not been granted the security permission (java.security.SecurityPermission) createAccessControlContext, then the action is performed with no permissions.

These methods are used in unit tests (BaseSecurityTest.java) and it causes therefore test failures.

Fix description:

* Grant the security permission *createAccessControlContext* for unit tests.

COR-338: Fix vulnerabilities relating to XML parsing

Fix description:

* Use Apache poi-ooxml 3.8-eXo01 which:

** Switch from dom4j to JAXP (SAX)

** New helper class: SAXHelper

* Use SAXHelper instead of SAXParser in eXo Core's XML Document parsers

* Upgrade xmlbeans from 2.3 to 2.6 for MSXWordDocumentReader.

Both Apache poi-ooxml 3.8-eXo01 and Xmlbeans2.6 add XMLReader classe to read XML document before parsing.

The XMLReader initiated by SAXHelper has the parameters to prevent XEE/XXE attacks by setting maximum expansion entity and disabling external entity.

  1. … 5 more files in changeset.
COR-329: Streaming parser for MSXPPTDocumentReader

Fix description:

* Implement streaming model to get properties and content of Microsoft Powerpoint files (OOXML).

* Index the content of the first 500 slides.

    • binary
    /exo.core.component.document/src/test/resources/test2.pptx
[PLF-5989] Upgrade dependencies to next snapshots

[maven-release-plugin] [PLF-5989]prepare for next development iteration

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[maven-release-plugin] [PLF-5989]prepare release 2.5.10-GA

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
[PLF-5989] Upgrade dependencies to latest releases

COR-329 : Event User Model approach for MSExcelDocumentReader and MSXExcelDocumentReader

Fix description:

* Use Apache POI's Event User Model to have lower memory footprint with big Excel files

* Limit the parsing to 5000 cells. Only index text cells of more than 2 characters.

* Improve POIPropertiesReader to have a lower memory footprint in getProperties with XLSX documents

COR-323: Mock class LazyListImpl failed to load item

Fix description:

- Verify right conditions and only return the appropiate result

JCR-2306: Use a consistent snapshot version to avoid having to change pom file at each release

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.organization.tests/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml
Merge remote-tracking branch 'origin/release/2.5.9-GA' into stable/2.5.x

    • -1
    • +1
    /exo.core.component.organization.api/pom.xml
    • -1
    • +1
    /exo.core.component.organization.jdbc/pom.xml
    • -1
    • +1
    /exo.core.component.organization.ldap/pom.xml
    • -1
    • +1
    /exo.core.component.script.groovy/pom.xml
    • -1
    • +1
    /exo.core.component.security.core/pom.xml
    • -1
    • +1
    /exo.core.component.xml-processing/pom.xml