This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This is a bugfix release that covers important issues, including 8 blockers, that we have discovered since XWiki 12.10.6 has been released.

New and Noteworthy (since XWiki 12.10.6)

Full list of issues fixed and Dashboard for XWiki 12.10.7.

Translations

The following translations have been updated:

• German
• Spanish
• French
• Korean
• Norwegian
• Russian
• Simplified Chinese

Tested Browsers & Databases

Here is the list of browsers we support and how they have been tested for this release:

	Browser	Tested on:
	Mozilla Firefox 88	Jira Tickets Marked as Fixed in the Release Notes
	Internet Explorer 11	Not Tested
	Microsoft Edge 90	Tests run and results
	Google Chrome 90	Not Tested
	Safari 14	Not Tested

Here is the list of databases we support and how they have been tested for this release:

	Database	Tested on:
	HyperSQL 2.5.1	Not Tested
	Oracle 19c	Not Tested
	MySQL 8	Jira Tickets Marked as Fixed in the Release Notes
	PostgreSQL 13	Not Tested
	MariaDB 10.5	Tests run and results

Here is the list of Servlet Containers we support and how they have been tested for this release:

	Servlet Container	Tested on:
	Tomcat 9.0.45	Jira Tickets Marked as Fixed in the Release Notes Tests run and results
	Jetty 9.4.29 (XWiki Standalone packaging)	Not Tested
	Jetty 9.4.29	Not Tested

Known issues

• Bugs we know about

Backward Compatibility and Migration Notes

General Notes

• When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
  • xwiki.cfg
  • xwiki.properties
  • web.xml
  • hibernate.cfg.xml
• Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Prevent redirections to untrusted domains

Redirections are now only performed to trusted domains in XWiki. The list of trusted domains is obtained from two sources:

1. any URLs used to access the wiki is considered as trusted, as well as all the aliases used for subwikis,
2. it's possible to specify in xwiki.properties the list of trusted domain by setting the property url.trustedDomains.

If a redirection is attempted to an URL whose domain does not belong to any of this source, a warning log will be output and the redirect is prevented. Note that it's possible to switch off this security mechanism by setting the property url.trustedDomainsEnabled to false.

API Breakages

The following APIs were modified since XWiki 12.10.6:

No breakage!

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

• Gabriel Răileanu
• Manuel Leduc
• Marius Dumitru Florea
• Simon Urli
• Stéphane Laurière
• Thomas Mortagne
• Vincent Massol