v7.1.4

Lutece core 7.1.4

New features

• LUT-29992 : Add the possibility to manage sql updates with liquibase plugin
• LUT-29922 : Add new formStyle in macro formgroup

Security

• LUT-30738 : Bump commons.lang3 version to 3.18

Improvements

• LUT-30479 : Add breadcrumb to corporate BO theme and remove default submenu item selection on first item
• LUT-30439 : Add ovelay loading message
• LUT-30438 : Reload site's properties with last selected tab as active tab
• LUT-30439 : Add an overlay macro to add overlay while the content of a page is loading
• LUT-30318 : Improve admin site button and dialog to add portlet
• LUT-30267 : Add crossorigin attributes to css plugin links in template plugin_css_links.html
• LUT-30222: Style guide update
• LUT-29882: Added parameters to Modal macros
• LUT-30116: Fix tabs in user management page
• LUT-29980 : Style guide is not displayed properly as it lacks resources from the themes folder

Bug fixes

• LUT-30217 : Manage empty String itemsPerPage value in abstract paginator
• LUT-30612 : Reconnection required to view a newly created workgroup.
• LUT-29260 : ERR_CACHE_MISS error when canceling in a pop-in
• LUT-30194 : Back url not taken into account in admin pop-ups
• LUT-30438 : Fix submit button was not in form
• LUT-30438 : Fix group selection when setting features group
• LUT-30438 : Fix bottom position for corporate
• LUT-29882: Added new parameters to Modal macro (fix)
• LUT-30657 : LinksInclude tests fixes
• LUT-29882: Macros tests fixes

## CI

• Update parent version in pom.xml to 7.0.2

v7.1.3

Lutece core 7.1.3

Bug fixes

• LUT-29794 : Unescape HTML characters in fileService encrypted URLs
• LUT-29627 : Users export missing data
• LUT-29882: Various fixes in templates and macros, reference file and properties update
• update library-workflow-core version (for fixes)

Improvements

• LUT-29653 : Add validation message to freemarker input macro
• LUT-29666: Templates and macros fixes and improvements

Withdrawals

• Revert "LUT-28182 : add a confirmation as a notification when a manual workflow action is triggered and correctly processed", to avoid bytecode incompatibility issues

v7.1.2

Lutece core 7.1.2

Bug fixes

• LUT-29679 : fix MultipartRequest XSS sanitizing
• LUT-29810 : update getFileStoreServiceProvider to fetch new FileStoreProviders
• LUT-29784 error in script update_db_lutece_core-7.10.-7.1.1.sql: missing a ; on line 8
• LUT-29835 : Fix i18n keys
• LUT-28515 : fix tests
• LUT-28439 - dark mode compatibility : change h1 color

Improvements

• [#16202] / LUTECE-2465 : add auto-imports for freemarker templates in addition to auto-includes
• LUT-28182 : add a confirmation as a notification when a manual workflow action is triggered and correctly processed
• LUT-29679 : Add table sanitizing and unescape @ and + for emails
• LUT-29666 : Add boxHeader's params titleClass and titileParam
• LUT-29775 : Add .truncate class in order to manage long labels

Withdrawals

• LUT-29798 : Externalize extra i18n resources files in library

v7.1.1

Lutece core 7.1.1

New features

• LUT-29675 : Add XSS sanitizer service
• LUT-29679 : Add a sanitizeFilterMode to XSS filters
• LUT-29600 : Add RichTextContentService

Improvements

• LUT-29653 : Add validation message to freemarker input macro
• LUT-29649 : Use RichTextContentService to enable the use of MarkDown rich text editor
• LUT-29574 : access to i18n message bundle resources keys
• LUT-28079 : Updated the hash algorithm used in AccessLogger
• LUT-29394 : Add a new Servlet for Downloading asynchronous file in back office
• LUT-28711 : Improve dark theme
• LUT-29582 : Improve template
• LUT-29494 : Move editor init script inot initEditor macro
• LUT-28387 : Improve properties management template
• LUT-28515 : replace the Message to Admin page with a generic message when reseting password
• LUT-28460 : Error not handled if the size of an uploaded document exceeds the maximum size defined in the web.xml file
• LUT-28580 : Upgrade TinyMCE to latest version 6 and remove TinyMCE oldies
• LUT-29162 : Store in session the origin admin user object provided by the authenticated module
• LUT-29160 : Add a method in Admin Authentication Service to get the name of the autenticate module load

Security fixes

• LUT-29734 : Deletion of the JSP SendResource to prevent the sending of unsolicited emails
• LUT-29577 : SECURITY : SecurityUtil.isInternalRedirectUrlSafe fails to flag external URL, leading to open redirect attack
• LUT-29108 : update commons-io version

Bug fixes

• LUT-29621 : Message displayed when logging out of the back office
• LUT-29190 : Technical settings : user account - default setting - the value "activated" is not taken into account
• LUT-29050 : Update TinyMCE's configuration to prevent the editor from automatically modifying inserted URLs
• LUT-29529 : Users management data presentation KO
• LUT-29666 : formGroup macro display fixes
• LUT-29581 : Fix admin dashboard templates
• LUT-26416 : Indexer : PageIndexer - ERROR : cannot change field "date" from index options=DOCS to inconsistent index options=DOCS_AND_FREQS_AND_POSITIONS
• LUT-29148 : Fix null pointer exception when editing a role
• LUT-29091 : Fixed incorrect event type for logout events in the logs

Withdrawals

• LUT-39671 : remove log and config view page
• LUT-28912 : Remove ambiguous setFileStoreServiceProvider() method
• LUT-29547 : Update key name for login image management in site properties

SQL upgrade scripts

see : src/sql/upgrade/update_db_lutece_core-7.1.0-7.1-1.sql

v7.1.0

Lutece core 7.1.0

(uses lutece-global-pom version 7.0.0 JDK 11)

New features

• LUT-28490 : Security header management admin feature

Improvements

• LUT-2193 : Move DosGuard upload filter configuration from web.xml to lutece.properties
• LUT-28925 : add an "append" method to the Daemon lastRunLogs
• LUT-28795 : Initialize site_name in AppTemplateServiceTest
• LUT-28766 : Add /themes/* to staticFilesCachingFilter core filter
• LUT-28513 : Limit last daemon run log size in daemons page display to avoid timeout issues
• LUT-28548 : Add a way to override default separator in DefaultFileDownloadService
• LUT-28532 : Add FileServiceException management
• LUT-28741 : In DatastoreService, do the prefix search in the SQL query

Bug fixes

• LUT-27514 : Fix minimal header top margin
• LUT-29043 : Fixed mandatory mark not displayed in formLabel macro
• LUT-28733 : add a control over page title length
• LUT-28865 : Wrong value for category.label.auth_admin_FO property
• LUT-26416 : Indexer : PageIndexer - ERROR : cannot change field "url" from index options=DOCS_AND_FREQS_AND_POSITIONS to inconsistent index options=DOCS
• LUT-28741 : Cache prefix lookups
• LUT-28800 : fix email pattern regex + user_level
• LUT-28523 : Test if node selection is not null befoer performing actions
• LUT-28464 : Add missing maxlength param for textarea

Withdrawals

• LUT-29111 : Remove StandAloneApp feature
• LUT-28742 : Removal of PRAGMA headers

SQL upgrade scripts

see : src/sql/upgrade/update_db_lutece_core-7.0.16-7.0.17.sql