Hi there,
Magnolia 5.4.5 has been released! 5.4.5 fixes a cross-site scripting (XSS) vulnerability and some other important issues, as well as adding some enhancements, among which: - The Content-Type header is no longer set by ContentTypeFilter. The MIME type was previously incorrectly set according to the request extension. It is now the responsibility of renderers/servlets, for example FreemarkerRenderer and JspRenderer, to set the correct content type. - ResponseContentTypeVoter is deprecated and replaced by RequestExtensionVoter to better reflect its function. The content type is still resolved only from the extension of the request. - Reloading of resources on the classpath while developing with an IDE such as IntelliJ or Eclipse has been improved and works fine now. See Classpath resources in development mode. - The optional dam-preview module now uses Apache PDFBox instead of Pdf-renderer to render PDFpreviews. - The option group field OptionGroupFieldDefinition now supports a layout property for radio buttons. Layout can be horizontal or vertical. Default is vertical. - Changes to Groovy model classes defined on the JCR are now picked up properly. - The Content translation support module now automatically detects the correct file format while importing. The XLIFF importer implementation was changed to UnzippedXliffTranslationBundleUpdateReader which only parses .xlf files. The old XliffTranslationBundleUpdateReader class is deprecated. The importer for a file is chosen automatically by comparing the extension property set for importer with the file extension. - In the CAS Connector module the casServiceURL property can now be used in the casLougoutUR property and it will be resolved correctly. - Implementing a site aware renderer for custom renderers is no longer necessary. You can now use info.magnolia.module.site.renderer.SiteAwareRendererWrapper with the name of the custom renderer set in the wrappedRendererType property. Site aware renderers for FreeMarker (site) and JSP (site-jsp) are included in the Site module. - i18n key generating for template definitions has been improved. There is no longer a need to use i18nBasename, title and description properties in template definitions. - The list of excluded resource directories set in FileSystemResourceOrigin can now be configured with the magnolia property: magnolia.resources.filesystem.observation.excludedDirectories. By default, the magnolia property is not set and the following folders are excluded: META-INF, WEB-INF, cache, docroot, logs, repositories, tmp. - New template scripts added to the classpath are now recognized and loaded properly. (This requires development mode to be set in Magnolia properties). - The MTK module has a new basic page template and an image component. - New Virtual URI mapping folders are now loaded without system restart. You can create the folders by hand or import them with JCR XML. Virtual URI mappings inside in the folder are available immediately. Release notes are linked below as usual, you can check out the full change log from there. Again, many thanks to everyone who reported, helped fixing or commented on these issues. Release notes: https://documentation.magnolia-cms.com/display/DOCS/Release+notes+for+Magnolia+5.4.5 Download: - Enterprise Edition: http://files.magnolia-cms.com/5.4.5/ - Community Edition: Download from Release notes page or from nexus https://nexus.magnolia-cms.com/content/repositories/magnolia.public.releases/ Maven generated site: (incl. javadoc) - https://nexus.magnolia-cms.com/content/sites/magnolia.public.sites/ref/5.4.5/ - https://nexus.magnolia-cms.com/content/sites/magnolia.public.sites/ui/5.4.5/ Cheers, Christoph, for the Magnolia Team. -- Context is everything: http://forum.magnolia-cms.com/forum/thread.html?threadId=43f55eb5-b073-4c09-9af1-0f7b30b5a7da ---------------------------------------------------------------- For list details, see http://www.magnolia-cms.com/community/mailing-lists.html Alternatively, use our forums: http://forum.magnolia-cms.com/ To unsubscribe, E-mail to: <[email protected]> ----------------------------------------------------------------
