Changes Report
Extensions Security Vulnerabilities Application
After some forum discussions we agreed that the extension is current not useful to fix security vulnerabilities, and is at risk of presenting false-positive. Until those issues are fixed, we decided to stop bundling it as part of the standard distribution.
Pre-edit document check
It is now possible for extensions to define a pre-edit document check, similar to what already exists for locked pages, or pages owned by extensions.
Required Rights
The Required Rights Application analysis is deactivated by default as the analysis is still incomplete and the presentation needs to be improved to more clearly show what's wrong. Still, the analysis can already provide useful warnings and this is a good opportunity to provide feedback as this feature will be activated by default in a future version of XWiki. It can be activated by setting the security.requiredRights.protection to warning.
#-# [Since 15.9RC1]
#-# Indicates how documents are protected by required rights.
#-#
#-# The possible choices are:
#-# * none (the default): no required rights check
#-# * warning: a warning is presented to the user when trying to edit a document with required rights issues
# security.requiredRights.protection=none
Added links towards documentation under the videos in the Help section.
Change viewer UI update
Improved the layout and added icons in the version comparison UI.
Improved contrast of the metadata display on the change viewer.
Added various HTML landmarks to improve the view page semantics.
Improved the visibility of the focus state of the "Create", "Edit" and "more actions" buttons found on the top right of every page content.
Added autocompletion to the login page and the register form.
New API to safely evaluate XObject properties
A new API to provide safe evaluation of XObject properties has been introduced to allow developers to control which properties from which XClasses should be evaluable, and how they should be evaluated. For XObjects that have assigned evaluators, the evaluated properties can be recovered in scripts through the new evaluate() method.
Affected children during page delete is now displayed with a Live Data
The list of affected children during page delete is now displayed with a Live Data.
Supported language setting is not shown anymore when irrelevant
The "Supported Languages" setting is now hidden when the wiki is not multilingual.
PDF Export Page Order
Starting with this version, when exporting multiple pages to PDF, by selecting them from the page tree, their content will appear in the generated PDF following the order from the tree:
- parent / ancestor pages are printed before child pages
- child pages are printed in the order they appear in the tree
This also means that we can now use the Pinned Child Pages feature to enforce a particular order in the PDF export.
The default colors used in the code macro have been altered slightly, in order to fit WCAG-defined contrast values. Those changes in color only apply to some highlighting colors, and are barely noticeable.
Improvements for editing the user avatar
The button for editing the user profile avatar is now more visible, easier to find and interact than before.
This action is now placed below the picture and features a standard button that spans the length of the sidebar menu
When adding an annotation, the focus is now set inside the newly displayed annotation editor.
Icon picker accessibility
The icon picker dropdown can now be operated using a keyboard.
document macro filters parameter
The documents macro now provides a filters optional parameter. It allows for the definition of a default filtering of the Live Data displaying the list of documents.
CSS3.0 parsing support
On some cases, CSS parsing is required server-side. Previously, on CSS 2.1 was supported. This is for instance used for image styles parsing.
