-
Bug
-
Resolution: Fixed
-
Low
-
None
-
7.18.0
-
None
-
Severity 3 - Minor
-
Issue Summary
This is reproducible on Data Center: yes
Use the new module like this:
<xstream-security key = "xstream-set" name="Some XStream allowlist set"> <wildcard>**</wildcard> </xstream-security>
does not work.
Steps to Reproduce
- Create an app that uses <xstream-security/>
- Use atlas-debug to start Confluence
Expected Results
The app runs without error
Actual Results
The below exception is thrown in the atlassian-conflence.log file:
2022-08-22 09:01:36,891 ERROR [ThreadPoolAsyncTaskExecutor::Thread 31] [plugin.osgi.factory.OsgiPlugin] onPluginContainerFailed Unable to start the plugin container for plugin 'com.company.myplugin' -- url: /confluence/rest/plugins/1.0/ | traceId: 401ca2d490aee6a6 | userName: admin org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sampleComponent': Invocation of init method failed; nested exception is com.atlassian.confluence.api.service.exceptions.ServiceException: Could not deserialize object as XStream might not be properly initialized
Workaround
When using atlas-debug add
<configuration>
<systemPropertyVariables>
<xstream.allowlist.enable>false</xstream.allowlist.enable>
</systemPropertyVariables>
</configuration>
- is a regression of
-
-
- Closed
-
[CONFSERVER-81014] xstream-security module not working in atlas-debug mode
| QA Demo Status | Original: Not Done [ 14330 ] | New: Not Needed [ 14332 ] |
| QA Kickoff Status | Original: Not Done [ 14234 ] | New: Not Needed [ 14236 ] |
| Resolution | New: Fixed [ 1 ] | |
| Status | Original: Ready for Development [ 10049 ] | New: Closed [ 6 ] |
| Remote Link | New: This issue links to "Page (Confluence)" [ 711553 ] |
| Remote Link | Original: This issue links to "Page (Confluence)" [ 709779 ] |
| Remote Link | New: This issue links to "Page (Confluence)" [ 709779 ] |
| Remote Link | New: This issue links to "Page (Confluence)" [ 706252 ] |
| Assignee | New: Ajay Sharma [ 19cb521e4007 ] |
| Status | Original: Needs Triage [ 10030 ] | New: Ready for Development [ 10049 ] |
| Link |
New:
This issue is a regression of |
| Description |
Original:
h3. Issue Summary
This is reproducible on Data Center: yes use the new module like this: {code:java} <xstream-security key = "xstream-set" name="Some XStream allowlist set"> <wildcard>**</wildcard> </xstream-security> {code} does not work. h3. Steps to Reproduce # Create an app that uses <{{{}xstream-security/>{}}} # Use {{atlas-debug}} to start Confluence h3. Expected Results The app runs without error h3. Actual Results The below exception is thrown in the {{atlassian-conflence.log}} file: {noformat} 2022-08-22 09:01:36,891 ERROR [ThreadPoolAsyncTaskExecutor::Thread 31] [plugin.osgi.factory.OsgiPlugin] onPluginContainerFailed Unable to start the plugin container for plugin 'com.company.myplugin' -- url: /confluence/rest/plugins/1.0/ | traceId: 401ca2d490aee6a6 | userName: admin org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sampleComponent': Invocation of init method failed; nested exception is com.atlassian.confluence.api.service.exceptions.ServiceException: Could not deserialize object as XStream might not be properly initialized{noformat} h3. Workaround When using {{atlas-debug}} add {code:java} <configuration> <systemPropertyVariables> <xstream.allowlist.enable>false</xstream.allowlist.enable> </systemPropertyVariables> </configuration> {code} |
New:
h3. Issue Summary
This is reproducible on Data Center: yes Use the new module like this: {code:java} <xstream-security key = "xstream-set" name="Some XStream allowlist set"> <wildcard>**</wildcard> </xstream-security> {code} does not work. h3. Steps to Reproduce # Create an app that uses <{{{}xstream-security/>{}}} # Use {{atlas-debug}} to start Confluence h3. Expected Results The app runs without error h3. Actual Results The below exception is thrown in the {{atlassian-conflence.log}} file: {noformat} 2022-08-22 09:01:36,891 ERROR [ThreadPoolAsyncTaskExecutor::Thread 31] [plugin.osgi.factory.OsgiPlugin] onPluginContainerFailed Unable to start the plugin container for plugin 'com.company.myplugin' -- url: /confluence/rest/plugins/1.0/ | traceId: 401ca2d490aee6a6 | userName: admin org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sampleComponent': Invocation of init method failed; nested exception is com.atlassian.confluence.api.service.exceptions.ServiceException: Could not deserialize object as XStream might not be properly initialized{noformat} h3. Workaround When using {{atlas-debug}} add {code:java} <configuration> <systemPropertyVariables> <xstream.allowlist.enable>false</xstream.allowlist.enable> </systemPropertyVariables> </configuration> {code} |
| Link | New: This issue is related to CONFSRVDEV-24986 [ CONFSRVDEV-24986 ] |