Verifies the integrety of the projects, as builds are executed immediately after a code change was detected. This plan provides no artifiacts (use a nightly build instead).
OF-2959: Plugin download in audit log
Plugin uploads were already added to the audit log. With this change, whenever an admin downloads a plugin, an entry is added to the audit log too.
OF-2722: Remove unused plugin download code
By moving JSP code into a servlet, static analyzers are finding more issues. One of the reported issues based on the change in the previous commit is that unsanitized user-provided input is used in the code that implements the downloading of plugins.
This particular code isn't used at all by the admin console. I've removed it in this commit.
OF-2722OF-2902: Remove commons-fileupload
The commons-fileupload dependency that is used by Openfire has a CVE reported against it (rather: against one of its dependencies).
Java/Jetty can nowadays natively process file uploads. There no longer is a need for commons-fileupload.
This commit replaces commons-fileupload, which resolves the outstanding CVE report.
Additionally some plugin-upload properties were slightly refactored.