Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-74692

Confluence 7.15 xstream-security module not working in dev mode with compat lib

XMLWordPrintable

      As the Confluence 7.15 version sets the xstream.allowlist.enable as true by default in the development mode that requires to use the xstream-security module.

      When using compat-lib, xstream-security module seems not work with the given explanations in https://confluence.atlassian.com/doc/xstream-1-4-upgrade-1026045605.html

      Cause
      It is found that security-module registration event registers the security module with core's and plugin's XStream, but not compat-lib's XStream reference.
      As part of quick solution, Confluence team would try to lazify the XStream reference in XStreamManagerCompat class.

      That provokes:
      com.atlassian.confluence.api.service.exceptions.ServiceException: Could not deserialize object as XStream might not be properly initialized

      Workaround
      If Confluence is running through amps, configure confluence JVM sysprop `xstream.allowlist.enable` to `false` using systemPropertyVariables. Please read more about setting system properties on its amps documentation.

            [CONFSERVER-74692] Confluence 7.15 xstream-security module not working in dev mode with compat lib

            James Richards made changes -
            Link New: This issue has a regression in CONFSERVER-81014 [ CONFSERVER-81014 ]
            Sumitra Sahu (Inactive) made changes -
            Link New: This issue is related to CONFSRVDEV-24986 [ CONFSRVDEV-24986 ]
            Cathy S made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 630386 ]
            Rachel Robins made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 628915 ]
            Rachel Robins made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 628915 ]

            James Whitehead added a comment -

            A fix for this issue is available in Confluence Server and Data Center 7.17.0.
            Upgrade now or check out the Release Notes to see what other issues are resolved.

            James Whitehead added a comment - A fix for this issue is available in Confluence Server and Data Center 7.17.0. Upgrade now or check out the Release Notes to see what other issues are resolved.

            Nam Ho added a comment -

            A fix for this issue is available in Confluence Server and Data Center 7.13.5.
            Upgrade now or check out the Release Notes to see what other issues are resolved.

            Nam Ho added a comment - A fix for this issue is available in Confluence Server and Data Center 7.13.5. Upgrade now or check out the Release Notes to see what other issues are resolved.
            Cathy S made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 626684 ]

            Ganesh Gautam added a comment - - edited

            bbc2e5f3acbb , can you please tell me about #2
            > 2. How is it using XStream?

            and one more:
            have you marked your class into allowlist and if yes, can you please share the snippet?

            Ganesh Gautam added a comment - - edited bbc2e5f3acbb , can you please tell me about #2 > 2. How is it using XStream? and one more: have you marked your class into allowlist and if yes, can you please share the snippet?

            Mamadou Barry added a comment -

            Hello @Ganesh Gautam,

            I'm working on the Scaffolding plugin.
            We are using it as described in this XStream upgrade guide?
            The previous version of confluence-compat-lib is 1.4.1. Now, we have bumped it to 1.4.2 as recommended.
            I'm running Confluence in dev mode. Everything works fine with prod-mode.

            I hope this helps with the investigation.

            Thanks

            Mamadou Barry added a comment - Hello @Ganesh Gautam, I'm working on the Scaffolding plugin. We are using it as described in this XStream upgrade guide? The previous version of confluence-compat-lib is 1.4.1. Now, we have bumped it to 1.4.2 as recommended. I'm running Confluence in dev mode. Everything works fine with prod-mode. I hope this helps with the investigation. Thanks

              ggautam Ganesh Gautam
              6a66c94f366a Pablo Gallego _Appfire_
              Affected customers:
              19 This affects my team
              Watchers:
              16 Start watching this issue

                Created:
                Updated:
                Resolved: