This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This is a bug fix release. It contains 27 security fixes, with the highest severity being 9.3/10.

New and Noteworthy (since XWiki 17.10.9)

Full list of issues fixed and Dashboard for 17.10.10.

Upgrades

The following runtime dependencies have been upgraded (they have a different release cycle than XWiki Commons, XWiki Rendering and XWiki Platform):

Translations

The following translations have been updated:

• English (British)
• French
• German

Tested Browsers & Databases

Automated testing

XWiki executes a lot of automated tests during its build, testing all supported configurations. In addition, some manual QA is also executed to try to discover additional problems (see below):

Manual testing

Here is the list of browsers we support and how they have been manually tested for this release:

	Browser	Tested on:
	Mozilla Firefox 152	Tests run and results
	Microsoft Edge 150	Not Tested
	Google Chrome 150	Jira Tickets Marked as Fixed in the Release Notes
	Safari 26	Not Tested

Here is the list of databases we support and how they have been manually tested for this release:

	Database	Tested on:
	HyperSQL 2.7.4	Not Tested
	MySQL 9.7	Tests run and results
	MariaDB 12.3	Not Tested
	PostgreSQL 17	Jira Tickets Marked as Fixed in the Release Notes
	Oracle 19c	Not Tested

Here is the list of Servlet Containers we support and how they have been manually tested for this release:

	Servlet Container	Tested on:
	Tomcat 11.0.23	Jira Tickets Marked as Fixed in the Release Notes Tests run and results
	Jetty 12.1.8 (XWiki Standalone packaging)	Not Tested
	Jetty 12.1.8	Not Tested

NOTE: This XWki version has been manually tested by the QA and has been validated.

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

• Bugs we know about

Backward Compatibility and Migration Notes

General Notes

• When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
  • xwiki.cfg
  • xwiki.properties
  • web.xml
  • hibernate.cfg.xml
• Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to XWiki 17.10.10

Name Attribute Disallowed on Most Elements

For security reasons, the use of the name attribute has been restricted. In XWiki syntax, it is only allowed on links. In the content of HTML macros in a document without script right or a comment, it is only allowed on <a> and <map> elements. In practice, this shouldn't cause any issues, but if necessary, this can be configured in the configuration of the XML Module in xwiki.properties.

Simple Math text captcha implementation removed

The Simple Math text captcha implementation has been entirely removed: it was never meant to be used in production and it proves to not be reliable as a CAPTCHA implementation.

Limits in charts width and height

The chart macro now has limits on the width and height parameters, set by default at 2048px, but that can be defined in xwiki.properties.

API Breakages

The following APIs were modified since XWiki 17.10.9:

No breakage!

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

• Andi Chandler
• Cédric LAMBLIN
• Gabriel Féo
• Lucas Charpentier
• Manuel Leduc
• Marius Dumitru Florea
• Michael Hamann
• Simon Urli
• Simpel
• Thomas Mortagne
• Vincent Massol
• xrichard