Release Notes for $doc.getValue('product') $doc.getValue('version')

Version 6.1 by Thomas Mortagne on 2024/12/12
Warning: For security reasons, the document is displayed in restricted mode as it is not the current version. There may be differences and errors due to this.

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.10\.1.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Contents

This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This is a bug fix release. This release contains security fixes, with the highest severity being 9.3/10.

New and Noteworthy (since Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.10\.1.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.
16.10.0)

Full list of issues fixed and Dashboard for XWiki 16.10.1.

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.10\.1.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Translations

The following translations have been updated: 

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

Backward Compatibility and Migration Notes

General Notes

  • When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
    • xwiki.cfg
    • xwiki.properties
    • web.xml
    • hibernate.cfg.xml
  • Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.10\.1.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

New query validation in the REST query database endpoint

The implementation of the REST query database endpoint has been modified to align with the behavior of the query script API. This includes a very strict validation, which may cause some perfectly valid (but complex enough to not be understood by the validator) queries to be forbidden if the current user does not have programming right.

Don't hesitate to report an issue on https://jira.xwiki.org/browse/XWIKI if this happens. A workaround in the form of a configuration to explicitly indicate allowed query statements will be introduced in 16.10.2.

API Breakages

The following APIs were modified since Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.10\.1.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.
16.10.0:

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.10\.1.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

  • LucasC 
  • Marius Dumitru Florea 
  • Michael Hamann 
  • Simon Urli 
  • Thomas Mortagne 

Get Connected