Build #232

Plan branch:

Build: #232 was successful Scheduled with changes by Guus der Kinderen

Code commits

Openfire (master)

  • Guus der Kinderen

    Guus der Kinderen b6217cbd03c91979577e6c2cf80dfb104cdbb1a7

    OF-2519: Fix MUC room membership with groups
    When loading an individual room (eg: at boot time, when room preloading is disabled), ensure that a MUC room member JID is evaluated as a group JID.

    • xmppserver/src/main/java/org/jivesoftware/openfire/muc/spi/MUCPersistenceManager.java (version b6217cbd03c91979577e6c2cf80dfb104cdbb1a7)
  • Guus der Kinderen

    Guus der Kinderen 1b6722fdd8d660c6a60509c3ad252041220f47e0

    OF-2518: Attempt to load favicon over HTTPS
    This adds an additional attempt to load the favicon. With this, both HTTPS and HTTP are attempted.

    Additionally, the URL that's used is now being constructed through a builder, which should further reduce the attack vector of using 'user-provided input'.

    • xmppserver/src/main/java/org/jivesoftware/util/FaviconServlet.java (version 1b6722fdd8d660c6a60509c3ad252041220f47e0)
  • Guus der Kinderen

    Guus der Kinderen 665b2efd00444e617b2fc8815b2110964691173c

    Remove suppressing of LGTM warning (since it has been addressed)

    • xmppserver/src/main/java/org/jivesoftware/util/FaviconServlet.java (version 665b2efd00444e617b2fc8815b2110964691173c)
  • Guus der Kinderen

    Guus der Kinderen 5ea449b3dbd77434a78e7f07e2e4cdd035e31d32

    Update CodeQL action from v1 to v2
    v1 is being deprecated: https://github.blog/changelog/2022-04-27-code-scanning-deprecation-of-codeql-action-v1/

    • .github/workflows/codeql-analysis.yml (version 5ea449b3dbd77434a78e7f07e2e4cdd035e31d32)