XWiki Enterprise 2.5 Milestone 2
Second milestone of the XWiki Enterprise 2.5 version (Roadmap).
The highlights of this release are: support for viewing attached office documents in the wiki, further improvements to the edit UI, more consistent use of user avatars.
New and Noteworthy (since XWiki Enterprise 2.4)
Support for viewing attached office documents in the wiki
Further improvements to the edit UI
More image manipulation settings
For a long time it was possible to scale attached images on the server, thus reducing the download time and ensuring consistent scaling of images across browsers. This is achieved by appending width and/or height query string parameters to the URL of the image.
Various Security improvements
Continuing a push for better security started this summer, 2.5M2 fixes some of the few cross-site scripting and SQL injections holes, and tightens the scope of programming rights. Of particular concern:
- With a default skin, programming rights are no longer available after the main content of the page; this means that the panels and the bottom tabs can't use restricted APIs anymore.
- To explicitly drop programming rights, a new API method was introduced: $xcontext.dropPermissions()
Backward Compatibility and Migration Notes
General Notes
You may also want to import the default wiki XAR in order to benefit from the improvements listed above.
API Breakages
The following APIs were modified since XWiki Enterprise 2.4:
[ERROR] org.xwiki.rendering.transformation.MacroTransformationContext: Method 'public void setMacroTransformation(org.xwiki.rendering.internal.transformation.MacroTransformation)' has been removed
[ERROR] org.xwiki.rendering.transformation.Transformation: Method 'public void transform(org.xwiki.rendering.block.Block, org.xwiki.rendering.transformation.TransformationContext)' has been added to an interface
[ERROR] org.xwiki.rendering.transformation.TransformationManager: Method 'public void performTransformations(org.xwiki.rendering.block.Block, org.xwiki.rendering.transformation.TransformationContext)' has been added to an interface
