Known Issues of Foswiki 1.1.X Production Releases
These are known issues of Foswiki 1.1.X. If you are still using a 1.0.X version of Foswiki see
KnownIssuesOfFoswiki01x00
The latest Foswiki release is available at
Download
Security Alerts
 Get Alerted: |
To get immediate alerts of high priority security issues, please join the low-volume foswiki-announce list - details at MailingLists |
- Security Alert 2012-02-08: Script insertion vulnerability in the default
/bin/register user registration code. When a new user registers, they can add arbitrary HTML and script code into their user topic which is generated by the RegistrationAgent via standard registration fields such as "FirstName" or "OrganisationName".
- Security Alert 2011-08-28: SlideShowPlugin should be updated to version 2.1.4 or later to close a cross site scripting vulnerability. All Foswiki versions are affected but the plugin can be updated in minutes from configure or manually by downloading and replacing the plugin from SlideShowPlugin
- Security Alert 2010-11-12:A normal user can alter topic preferences using the "Edit topic preference settings" feature and save them even though he has no privileges to edit the topic.
- Description available in SecurityAlertCVE20104215. Only versions 1.1.0 and 1.1.1 are affected. It is fixed in Foswiki release 1.1.2 released 10 Nov 2010.
See
SecurityAlerts for full list of all alerts.
Major issues
Minor issues
| Task Ref |
Affects |
Description |
Fix |
| Item11454 |
Performance |
Foswiki 1.1.4 is slower and shows info.author as 'UnknownUser' when Topic.txt is mauled by an external process without updating its .txt,v file |
Work-around mentioned in Item11454; the last-modified time of .txt,v files in the affected web need to be equal to or later than the modified .txt to prevent Foswiki from accessing RCS history. A complete fix is forthcoming in a future patch release. |
Major issues
| Task Ref |
Affects |
Description |
Fix |
| Tasks.Item10714 |
Date form fields |
Form fields of type date cannot be edited with pop-up calendar when using latest Internet Explorer versions |
Download fixed javascript file from Tasks.Item10714. Fix will be in 1.1.4. The fix also reactivates the browser alert when trying to save empty mandatory fields |
| Tasks.Item10874 |
Topics which have had DataForms added via the edit screen's "Add/change form" button, which were being QuerySearched on exact form.name values that were expected to only contain the topic name part of a DataForm? 's location |
Using "Add/change form" button saves fully-qualified Web.Topic name even if WEBFORMS = Topic. This might might make some topics invisible to some of your existing QuerySearches. |
Replace your copy of lib/Foswiki/UI/ChangeForm.pm with this version or apply Foswikirev:11911. See Tasks.Item10874 for more information including suggestions for finding and fixing the erroneous form.name values |
| Tasks.Item11105 |
Attachment comments. |
When updating an existing attachment, the comment field is changed to a fixed string "save attachment" and any existing comment is lost. |
Apply the changes to lib/Foswiki/Meta.pm and lib/Foswiki/Store/VC/Store.pm in Foswikirev:12443.
|
Minor issues
Major issues
Minor issues
| Task Ref |
Affects |
Description |
Fix |
| Tasks.Item10022 |
Can only install one extension at a time in configure |
Configure has an error so if you selected multiple extensions for installation only the first was installed. |
Fixed in 1.1.3 |
Major issues
| Task Ref |
Affects |
Description |
Fix |
| Tasks.Item9904 |
Twisties will not close in Internet Explorer |
There is some javascript error that makes the TwistyPlugin calls to JQuery fail. |
TwistyPlugin version 1.6.8 fixes the problem. There is also a new version of JQueryPlugin 3.75 that you should upgrade to avoid JS errors in browser. Simply upgrade via configure or download and install the fixed versions. Fixed in Foswiki 1.1.2 |
| Tasks.Item9936 |
Cache feature lacks files in 1.1.1 |
When you enable page caching {Cache}{Enabled} in configure Foswiki errors out because of missing files |
The missing files will be added in 1.1.2. Meanwhile you can download the missing files from Tasks.Item9936 |
Minor issues
Major issues
Minor issues
| Task Ref |
Affects |
Description |
Fix |
| Tasks.Item9810 |
All |
It is not possible to add a group to a group with the new Groups API. Use the more topic actions link to edit the group preference settings directly. |
Fixed in 1.1.1 |
| Tasks.Item9815 |
1.1.0 Twisty content |
Twisty state (open/closed) is not remembered between page views |
To support loading via AJAX, anonymous twisties are given random IDs. Specify a fixed ID if you are setting remember="on". A new version of TwistyPlugin to fix remember state on anonymous twisties should be available before the next patch release (1.1.1). Monitor TwistyPlugin for updates. Fixed in 1.1.1 |
| Tasks.Item9819 |
Installing extensions |
Certain extensions, such as FullCalendarPlugin cannot be installed with the extensions installer or configure. |
An updated lib/Foswiki/Configure/Package.pm can be installed. Or manually install the extension by manually expanding the archive from the root of the Foswiki installation. Fixed in 1.1.1 |
This topic: Support
> WebHome > KnownIssuesOfFoswiki01x01
Topic revision:
08 Feb 2012, PaulHarvey
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. see CopyrightStatement. 
