Openfire (master)

• 

  Guus der Kinderen 28 Dec 2023 b94426a3eef844adab383cf82b2c50bb59e3d44d

  OF-2736: Admin console: missing header in session details
  The first bit of the data shown in the table is only available on the local cluster node. That is being excluded from the output, but by mistake, the table header was excluded too.

  • xmppserver/src/main/webapp/session-details.jsp (version b94426a3eef844adab383cf82b2c50bb59e3d44d)
• 

  arwen <changwenwen@126.com> 28 Dec 2023 b22a7dfeb66f6908a7f8596511b5e94a0995e3c3

  OF-2763 fix: View plugin pages or resource reports http status code 403
  Refer OF-2647, since code change from:
  File file = new File(pluginDirectory, parts[1] + File.separator + "web" + contextPath);
  to:
  Path file = pluginDirectory.resolve(parts[1]).resolve("web").resolve(contextPath);,
  if contextPath start with '/', the variable file will change to contextPath, it is not correct.
  If System property "plugins.servlet.allowLocalFileReading" not setting, will get http status code 403, restAPI document page cannot open[/plugins/restapi/docs/index.html], and monitoring resource /plugins/monitoring/images/icon_clock-1hour.gif cannot download.

  • xmppserver/src/main/java/org/jivesoftware/openfire/container/PluginServlet.java (version b22a7dfeb66f6908a7f8596511b5e94a0995e3c3)