Update your user macros on Confluence 5.5.1 and atlassian-xwork-core-1.17 – David Simpson – deliver. iterate. repeat.
Posted by David Simpson on May 22, 2014. Return to index.
Following yesterdays Atlassian security advisory for Confluence, it looks like there are some added steps required for people who have user macros. Be careful folks.
You can't use the same shorthand you use for standard variables. #if ($paramistrue) will always evaluate as true.
You now have to use things like #if ($paramistrue == true) or #if ($paramistrue == false).
@baitman For strings I can no longer do #if ($paramfoo), I have to do #if ($paramfoo).length() > 0. Which is crazy.
@baitman Also, if you're upgrading to 5.5.1 to fix the security vulnerability double-check that it's upgraded xwork to 1.17. Ours wasn't.
The update to atlassian-xwork-core-1.17.jar means you have to be more specific with your coding. Thanks to @BergerofLondon for the heads up.