Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-73758

Multiple apps cannot render velocity template in confluence 7.13.1

    XMLWordPrintable

Details

    Description

      Issue Summary

      New velocity lib 1.6.4-atlassian-23 in confluence 7.13 prevent velocity template render correctly due to restricted class: 

      net.java.ao.Entity,
      net.java.ao.RawEntity,
      net.java.ao.EntityProxyAccessor

      Steps to Reproduce

      1. Start confluence 7.14.x
      2. Install plugin https://marketplace.atlassian.com/apps/1211907/announcer-for-confluence/version-history
      3. Create announcer items, the items can't be rendered.

      Expected Results

      Announcer items should be renders correctly and no error

      Actual Results

      Items are rendered with blank contents

      Workaround

      • Stop confluence
      • Edit file  /WEB-INF/classes/velocity.properties 
      • update introspector.allowlist.classes with values
      • introspector.allowlist.classes = java.io.Serializable,\
        java.lang.reflect.Proxy,\
        net.sf.hibernate.proxy.HibernateProxy,\
        net.sf.cglib.proxy.Factory,\
        java.io.ObjectInputValidation,\
        net.java.ao.Entity,\
        net.java.ao.RawEntity,\
        net.java.ao.EntityProxyAccessor 
      • Restart Confluence

      Affected apps that have confirmed to be impacted

      • com.wittified.atl-announcer-confluence
      • com.stiltsoft.confluence.quiz

      Notes

      For other affected versions see:

      Attachments

        Issue Links

          Activity

            People

              qpham@atlassian.com Quan Pham
              qpham@atlassian.com Quan Pham
              Votes:
              7 Vote for this issue
              Watchers:
              18 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: