Funnelback 15.8 patches

15.8.0.35

Removes the screens for file-manager rule editing which could create security issues

15.8.0.35

Fixes an issue where the running Funnelback jetty web server could retain permissions via supplemental groups after startup

15.8.0.35

Removes the unused administration debug.cgi script which reflected input parameters without proper escaping

15.8.0.33

Prevent XSS AngularJS sandbox bypassing injection in Freemarker templates by inserting zero-width whitespace between consecutive open-curly-brackets.

15.8.0.31

Prevents creation of objects within Freemarker template files to ensure that template editors can not cause external code to be executed.

15.8.0.29

Fixes a bug where ratio to run full or incremental updates was not being applied and only a full update was triggered.

15.8.0.27

Fixes a bug where the Admin API was passing the comment to the publish hook as multiple arguments where it should have been passing the comment as a single argument.

15.8.0.25

Fixed an issue where the user editing interface for a user with no permitted collections would be presented with all collections selected, rather than none.

15.8.0.24

Changes the click tracking endpoint to no longer depend on the referrer. This does result in the click logs no longer containing the referrer URL.

15.8.0.22

Restores the behavior of update.pl such that the gatherer (e.g. the web crawler) will use the same collection.cfg file that is passed to update.pl.

15.8.0.21

Updates the location of the Push sync restart API call to be consistent with other state changing calls. The existing API call is kept for compatibility.

15.8.0.21

Adds support for fixing a bug where a data folder for a non-existent collection would be created when a request was made on the search interface to the collection. Affects Linux only.

15.8.0.19

Introduces the ability to customise the jetty access logging configuration with logback.

The default behaviour of logging is unchanged, however with this patch it is possible to configure access log compression, filtering and size-based retention policies if desired.

See Funnelback version 15.12 "Configuring embedded web server" documentation for details and example of how to customise access logging configurations.

15.8.0.17

Adds a customData map in the SearchQuestion for convenience

15.8.0.16

Fixes a bug in the query processor where sorting on file size did not work.

15.8.0.14

Fixes a bug where Push Replication would re-attempt a connection to master without sleeping if the response from master was not a 200.

15.8.0.14

Improves Push Replication performance by enabling compression on more files.

15.8.0.12

Fixes an issue where the mail.on_failure_only collection configuration option was not respected by updated.

15.8.0.11

Fixes an issue where instant delete tries to kill documents from an index that doesn’t exist causing the update to fail

15.8.0.10

Fixes an issue where the analytics log was always appended to, resulting in a log file that always grew in size.

15.8.0.8

Updates the version of pdfbox used for filtering so that more PDFs can be correctly filtered.

15.8.0.6

Fixes an issue with anchors not being preserved in the displayUrl node of the data model.

15.8.0.6

Fixes an issue where date sorting in the query processor would not sort future dates correctly.

15.8.0.5

Fixes an issue where updates could not be started from the Collection Overview section of the admin home page.

15.8.0.3

Fixes a problem in the query processor (introduced in 15.8.0.2) which could slow query processing or cause an OutOfMemoryError within the web server.

15.8.0.2

Fixes a bug with promoted URLs where those that were only partial matches would not be promoted to the top position.

15.8.0.1

Fixes a bug with the license usage API which included documents which are not normally searchable e.g duplicate documents and binary documents. This patch also excludes documents in the included funnelback_documentation collection from counting towards the license limit.