Pydio Cells Files

Pydio Core 6.2.2 - Bugfix and Security update

Pydio Core 6.2.2 is another bugfix release providing compatibility fixes for non-standard plugins to the core. See complete changelog below.
Thanks to the following contributors for this release: cdujeu, c12simple, Isma91, floffel03, rbrdevs, DepaMarco, Ellega. Olivier Paroz, Stéphane Chadeyron.


Noticeable changes

Over-agressive caching could end up creating issues in IE when switching workspaces
Security: sanitization strengthen for potential XSS attacks.
Fix regression on "Remember Me" switch
Fix Video Player for FireFox
Joomla Bridge Compatibility (broken by last Joomla version).


Detailed Changelog

Update Italian translation for plugins: 'access.ajxp_conf', 'action.compression', 'action.share', 'core.ajaxplorer', 'core.notifications' (details)
Take the active mailer plugin , not the first that comes (details)
[core.mailer] Update the class which takes the active mailer plugin (details)
[conf.sql / access.ajxp_user] Improve Team management. (details)
Websocket: if there's an internal BIND address, it's most likely the address the php server will have to connect to. Added a Todo to handle REST auth. (details)
Unserialization can fail on some systems, make sure to reload role if it's not an object after waking up object. (details)
Fix SFTP username containing dash character (git issue #1014) (details)
[gui.user] Fix display & i18n message (details)
[gui.ajax] Create a "legacy" version of the bundle without ReactDND, and add fallbackCondition and fallbackFile in the js/css ressources to load alternative versions. (details)
Make test on personalRole stronger if there is an error at deserialization time. (details)
IE Caching policy is too agressive, we have to add some random ID to force reload sometime. (details)
Renamed constructor for PHP7 compatibility (details)
Update CLA URL (details)
Handle repository with deleted parent. Should fix #1025 (details)
Typo in getRelatedNotifications() method (not used). (details)
Update CONTRIBUTING.md (details)
[core.notifications] fix getRelatedNotifications() (details)
Fix #1019 (details)
Util function to get user label either from role directly or from user object. (details)
Fixed recursive indexation issue with FTP workspaces. (details)
Wrappers must declare isSeekable() to enable listing optimizations in fsAccessDriver. (details)
Make sure not to load an indexed document if the meta.change event comes from a "delete" operation. (details)
Enforce sanitization of user id when sending to error log. (details)
Update window.MessageHash when changing i18n. Alternative fix #1021 (details)
Typo in rest parameter for role_update_right (details)
Pass optional parameters to the node->load() method. (details)
Pass optional cursor parameter to the logs. SQL logger can use it as a query limiter to only load data starting from a given id. Return cursor attribute in XML as well. (details)
Use udevil to mount instead of sudo (details)
Improve performance: caching ldap search result in class static variable (details)
Improve notifications on shared resources - Separate Location from the notifications - Avoid empty label in Alerts feed. (details)
Better catch of imagick call error. (details)
Fix tmp folder for unoconv (details)
Strip only left space on dirname - Fix #1023 (details)
Imagick: Parameters should follow convert command. (details)
Fix rewind on SchemeTranslator wrapper - Prevent editing meta on non-writeable resource. (details)
[auth.remote] Make sure to keep the initial session.save_handler - Fix Joomla connector. (details)
Joomla plugin: make sure to switch back to previous session, as the session content is saved in register_shutdown_handler. (details)
Compute locationType when setting node, so that it can be serialized/unserialized (details)
Do not cache Sharing configs - Fix #1013 (details)
Make sure to use === when comparing to constants, or repo 0 can be considered as repo_scope_all. Enable kvcaching in non-rest controller. (details)
[ShareCenter] Fix unshare workspaces from My Account zone - Fix readonly mode not being switched correctly in some case. (details)
Registry Cache Key : repo can be null. (details)
Fix Exif metadata display in InfoPanel when no GPS parameter is defined in the plugin or no GPS data is present in photo. (details)
Fix regression on contextual menu content and default item display. (details)
Fix regression on "Remember Me" feature. (details)
Replace pydio.getController().parseXmlMessage() by PydioApi.getClient().parseXmlMessage. Same for triggerDownload() moved as static method on PydioApi. (details)
Fix Eml Attachment Download. (details)
Replace all Controller.parseXmlMessage calls by PydioApi.getClient().parseXmlMessage in manifests. (details)
Replace ' by " to avoid label truncating on users/teams listing. Better sanitization and error catching on Team creation. (details)
Prevent editor.browser to open SVG files directly, always force as attachment. (details)
Pass the $url to isSeekable(), allowing to return different value depending on the path (=> return false for Zip files in fsAccessWrapper, or it's messed up when browsing zip subfolders). (details)
Declare restParams on compress in action.powerfs, otherwise API is not working for this action when plugin is active. (details)
Fix ChangesTracker for filter + mask management. Fix indexation issue when copying folders. (details)
Specific fix for video player for Firefox (details)
Update sdk generator: do not skip already parsed actions. (details)
* Setup wizard can now be translated completely * Added german translations for setup wizard (details)
Fix display quota on FreeBSD (details)
Fix file/folder message on move. Close and replace PR #1000 ($dirRes is never set in that case) (details)
Update .travis.yml (details)
Updated ca/es files (details)
PHP7 Constructors fixes (details)
PHP7 Constructor fixes (details)
Missing Comma in ca.php (details)
Add Travis Badge (details)
Fix #1010 Zip Browsing on Windows Server (details)
Add new parameter for signature - Add Frankfurt & Seoul Regions. Close #846 (details)
Fix log grouping Fix Copy Selection action (details)
Fix google shortner api key - Close #1030 (details)
Make sure to not return an empty value. (details)
Fix some specific zip extraction case on Windows Server. (details)
Fix multimode value : check instance_name OR group_switch_value (details)
Fix MacOS Yosemite / El Capitan Detection (details)
Fix italian "Invite" button: missing translation strings. (details)
HTML Base Tag is not correctly applied in IE10 when dynamically inserting "link". Add an data-hrefRebase tag to be processed (prepending the base) on ie10 only. (details)
Close session when sending binary files. Could create a race condition with tryLogUserFromCookie. (details)