-
Bug
-
Resolution: Fixed
-
Medium
-
7.10.0
-
Severity 3 - Minor
-
Gadgets have moved to use whitelist.isAllowed(URI, Userkey) to give more controls to admins to whether allow anonymous users or not.
More details on the whitelist API changes can be found here:
https://asecurityteam.atlassian.net/browse/VULN-217900
We had to enable the old behaviour of whitelist.isAllowed(URI) temporarily as part of:
BSP-2173 Update isAllowed method to use old behaviour
Failing tests with new API:
| Failed | HtmlIncludeFuncTest testWhitelistAllowUsingExactMatch History |
Failing since build #1 (First build for this plan) | 8 secs | ||
| Failed | HtmlIncludeFuncTest testWhitelistAllowUsingRegex History |
Failing since build #1 (First build for this plan) | 8 secs | ||
| Failed | HtmlIncludeFuncTest testWhitelistAllowUsingWildcard History |
Failing since build #1 (First build for this plan) | 8 secs | ||
| Failed | RssMacroWhitelistTestCase testWhitelistAllowUsingExactMatch History |
Failing since build #1 (First build for this plan) | 9 secs | ||
| Failed | RssMacroWhitelistTestCase testWhitelistAllowUsingRegex History |
Failing since build #1 (First build for this plan) | 9 secs | ||
| Failed | RssMacroWhitelistTestCase testWhitelistAllowUsingWildcard |
Logs attached!
- links to
- relates to
-
VULN-253132 Failed to load
[CONFSERVER-60864] Html Macros should respect authenticated user based on allowlist API
When I try to reach VULN-253132 it redirects me to VULN-217900.
A fix for this issue is available to Server and Data Center customers in Confluence 7.12.1
Upgrade now or check out the Release Notes to see what other issues are resolved.