Funnelback patch 15.6.0.35
- 
Released: 2018-12-19 
- 
Applies to: v15.6.0 
- 
Internal reference: SUPPORT-2838 
Description
Prevents creation of objects within Freemarker template files to ensure that template editors can not cause external code to be executed.
Deployment
- 
If the installation has Facebook collections, the Version given to the DefaultFacebookClient should be changed to Version.Latest e.g. new DefaultFacebookClient(Version.LATEST). 
- 
(Windows only) Stop currently running crawls. 
- 
Stop the Jetty web server and the Funnelback daemon. 
- 
Deploy the provided files on top of an existing install, backing up all replaced files. 
- 
Start the Jetty web server and the Funnelback daemon. 
- 
(Windows only) start crawls as needed. 
- 
As patches are cumulative, apply deployment instructions from previous patches.