Funnelback patch

  • Released: 2016-12-09

  • Applies to: v15.6.0

  • Internal reference: SUPPORT-2332, SUPPORT-2336, FUN-9450/SUPPORT-2327


Fixes several issues as detailed below:

  • An issue where incorrect profile parameter is passed to Marketing Dashboard’s feature pages when user views the Admin Home Page for the first time or user’s cookie has been cleared or expired.

  • An issue where accessibility auditor acknowledgements could be incorrectly treated as not-editable.

  • An issue where very large images could be uploaded to /s/scale, consuming all memory on the server. Note that a default size limit of 1MB is now applied, and can be configured with the default_image_fetcher.max_source_image_bytes global.cfg setting where implementations require a larger value.

Affected files

  • lib/perl/Funnelback/ Correct getting the profile for the default selected collection.

  • web/webapps/funnelback-wca-reporter.war: Correct handling of inaccessible acknowledgements.

  • web/webapps/funnelback-publicui.war: Imposes a limit on the size of images /s/scale will process

  • conf/global.cfg.default: Sets a default size limit for s/scale (1MB)


  • Stop the jetty web server.

  • Deploy the provided files on top of an existing install, backing up any files replaced.

  • As patches are cumulative, apply all deployment instructions from previous patches.

  • Start the jetty web server.