Funnelback patch 15.14.0.36
- 
Released: 2019-09-24 
- 
Applies to: v15.14.0 
- 
Internal reference: RNDSUPPORT-3041 
Description
- 
Prevent XSS AngularJS sandbox bypassing injection in Freemarker templates escaped using output formats by inserting zero-width whitespace between consecutive open-curly-brackets. 
Deployment
- 
(Windows) Stop currently running crawls. 
- 
Stop the Jetty web server and the Funnelback daemon. 
- 
Deploy the provided files on top of an existing install, backing up all replaced file- Start the Jetty web server and the Funnelback daemon. 
- 
(15.14.0.14) The conf/<collection>/custom_gather.groovyof each Facebook collection that is failing to update due to Facebook API changes should be updated to have the content provided inshare/custom_collection_templates/custom_gather.groovy.facebook. The customer will need to provide a never-expiring page access token to replace the app access token.
- 
(Windows) Start crawls as needed.