GR:Gravity/New and Noteworthy/V9.1.3

From Remain Software
Jump to navigation Jump to search

Server issues/enhancements resolved

909 - Xref support for Octo
A Gravity CORS server setting has been introduced so that Xref has better support for being accessed from a browser. Enable through the configuration by setting web.allow.cors=xref
I2166 - fix Solr vulnerabilities in Gravity, all registered Solr 4.3.0 vulnerabilities (CVEs) have been assessed and addressed.
To mitigate potenially harmfull XSS attacks from the Solr Admin UI, we have removed the Admin UI, also the Solr replication handler has been disabled to remove the possibility of SSRF exploits.
I2168 upgrade mysql jdbc connector 8.0.23
The Gravity JDBC driver has been upgraded to support version 8 of the MySql database.