Release Notes
Contents
XP8
Tech Stack
-
Java 25
-
Jetty 12
-
Hazelcast 5
-
Prometheus metrics
Universal API
Widget API renamed to Admin Extensions API
-
Widget API replaces the old Admin Widgets
Content API improvements
-
moveandrenamemethods merged into onemovemethod -
setChildOrderandreorderChildrenmethods merged into onesortmethod -
Content
hasChildrenproperty has been removed -
content permissions applied on
masteranddraftsimultaneously, there is no need to publish content to apply permissions
Node API improvements
-
patchmethod in Node API - allows to apply changes in node in multiple branches -
allTextconfig with languages support -
node permissions can be applied on multiple branches simultaneously
-
no more
inheritsPermissionsflag on Node
Virtual Host Context
Default context values provided via vhost config files
Identity keys validations
All identity keys have several common restrictions:
-
must not be not empty string
-
must not be not a single underscore
_, dot.or double dot.. -
must not include
/or\characters -
must not include and Whitespace characters, except for space character
U+0020 -
must not start or end with dot space character
U+0020
Node, Content, Issue names
Follow common Name validation restrictions
IdProviderKey and PrincipalKey
Follow common Name validation restrictions with additional restriction of not including space character U+0020 and the following characters: <, >, :, ", |, ?, *, &, '
DescriptorKey
-
All CMS Schema Descriptor Keys including MacroKey
-
Task key
-
API key
-
HTTP Service key
-
Admin Tool key
-
Admin Extension key
Have additional restrictions:
-
must not include any of the following characters:
<,>,:,",|,?,*,&,' -
must not incuse space character
U+0020 -
64 characters limit
ApplicationKey
-
must match the following regex:
^\w+(?:\.\w+)*$ -
63 characters limit
RepositoryId
-
must match the following regex:
^[a-z0-9][a-z0-9._-]*$ -
63 characters limit
Branch
-
must match the following regex:
^[a-z0-9][a-z0-9.-]*$ -
63 characters limit
ProjectName
-
must match the following regex:
^[a-z0-9][a-z0-9_-]*$ -
48 characters limit
Security
-
Authentication no longer searches for the first matching user across all ID providers. It is ever VHost default, of explicitly specified ID provider.
-
New hashing algorithm for passwords
pbkdf2-sha512used for new passwords -
removed
md5andsha1hashing algorithms supportxp.suPassword
Dump-Restore, Import-Export
-
Full repository export
-
Partial dump and restore
-
drop support of plain-file exports and dumps
-
drop support of dry-run
Other
-
New admin home page http://<host>:8080/admin
-
request.localein Request -
The location of dumps is now configurable in Repository config
-
New names method for HTTP methods in controllers:
GET,POST, …