OpenCms 7.0.5 release notes

This is the release of OpenCms 7.0.5. With OpenCms 7.0.5, a number of issues and security problems that persisted in the 7.0.4 release have been fixed. Some new features have been added as well.

New Features in OpenCms 7.0.5

• Added editor with syntax highlighting functionality for all text based files (e.g. XML, HTML, JSP)
• Added option for copying content from one locale to another in the XML content editor
• Added Spanish Localization, contributed by OpenCmsHispano
• Added administration tool for image cache flushing
• Added new preference option for displaying all projects or only the ones in the current OU in the project selector
• Added new site alias attribute to manipulate request time
• Added several connection attempts the database during startup
• Added JQuery module that contains a set of default jQuery libraries
• Added <cms:jquery> tag to use packed/unpacked jQuery versions depending of the current project
• Added function to display module dependencies in a sorted list in the workplace administration
• Added option to plug in an extended decoration module to the <cms:decorate> tag
• Added new flags in the configuration to enable/disable certain caches
• Added configuration options for servlet container specific settings, fixing issue #1628

Fixed issues and other changes in OpenCms 7.0.5

• Fixed security issue 28152 reported by Security Focus
• Fixed security issue 490498 reported by Security Focus
• Fixed security issue manipulating JSP files
• Fixed security issue related to message broadcasting
• Fixed issue #900: Search fails when searching with umlauts and wildcards
• Fixed issue #1409: NPE in case of redirect inside a included file with cacheable set to false
• Fixed issue #1481: CmsXmlDateTimeValue prevented storing dates before 1/1/1970 in XML contents
• Fixed issue #1491: Incorrect behavior of language selector in editor with 3-symbols locales
• Fixed issue #1568: Broken calendar widget for locale ES
• Fixed issue #1571: Publishing of strongly related resource ignores locking
• Fixed issue #1580: Publishing and Static export run with too high priority and lock out other tasks
• Fixed issue #1581: Logic error for temporary disabled user accounts
• Fixed issue #1586: Broken calendar widgets for locale PT
• Fixed issue #1591: OpenCms does not start if configured scheduled job class is missing
• Fixed issue #1593: CmsFormHandler of Template One generates invalid HTML/XHTML code
• Fixed issue #1594: Location bar in workplace malfunctioning without ending '/'
• Fixed issue #1595: Module manifest file does not escape XML entities
• Fixed issue #1596: Projects can be created being in the Online project
• Fixed issue #1602: Editor for xmlpages has a dependency to the welcome module
• Fixed issue #1610: Specific CSS selectors used for placing JQuery direct edit images
• Fixed issue #1617: CmsImageScaler throws Exception when scaling images from/to certain dimensions   
• Fixed issue #1621: Pagination in the Explorer view fails if the number of items is equal to number of files per page
• Fixed issue #1626: NPE while uploading with the upload applet on some application servers
• Fixed issue #1627: Security Issue in Logviewer
• Fixed issue #1628: Deploying on different servlet containers
• Fixed issue #1630: Configuration of creating internal resources is lost
• Fixed issue with highlighting context menu entries in Internet Explorer 7
• Fixed issue while deleting a folder containing a file previously deleted in another project
• Fixed issue with NPE in MacroResolver
• Fixed issue with importing / exporting CSV user data
• Fixed issue with broken workplace when startup folder does not exist or misses /
• Fixed issue with NPE when trying to direct delete after restart without workplace login
• Fixed issue with concurrent JSP page requests when writing to RFS is needed
• Fixed issue with broken calendar widget in French or Italian localization
• Fixed issue with the <cms:editable> tag, it now detects if it has to include the script files or not
• Fixed issue with trailing "/" when reading resources in the VFSDriver
• Fixed issue with the "'" character not being allowed in email addresses
• Fixed issue with deleted resource restoration only working based on parent folder id, not on folder path
• Fixed issue with initial site check during login
• Fixed issue with using the category collector without resource type restrictions
• Improved Template Two example and demo content
• Improved internal link validation performance
• Improved performance when having several organizational units
• Improved TOMCAT_HOME detection in CmsShell to work in more Tomcat setup scenarios
• Updated Lucene jars to version 2.3.1
• Updated simapi.jar to version 0.9.7, fixing issue #1617

General Features of the OpenCms 7 release

• An update Wizard for OpenCms 6 installations on MySQL, Oracle and PostgreSQL is available.
• Support for Oracle, MySQL, PostgreSQL, MS SQL Server, DB2, AS400 and HSQL databases included.
• The internal link management has been greatly improved.
• If files (or folders) are moved / renamed, all links to these files are now kept intact.
• Deleting a resource that is linked by other resources does now display a warning / confirmation dialog.
• The new "Content Relationship Engine" (CRE) allows defining arbitrary relations between OpenCms resources.
• Native support for WebDAV access to the OpenCms VFS has been added.
• Publishing of resources is now done using a queue, so a user can continue to work after publishing has started.
• The concept of "Organization Units" (OUs) has been added to the internal user management.
• System permissions are now based on a complete new set of "Roles".
• It is now possible to delegate management of users / groups in OUs to Sub-Administrators.
• A "switch user" (su) function for Administrators in the OpenCms Workplace is now available.
• Many usability improvements for the OpenCms Workplace have been made, especially concerning the handling of other users locks.
• Many dialogs in the OpenCms Workplace are more responsive because of the use of Ajax technologies.
• The context menus in the Workplace are now cascading and can be configured individually based on the users permissions.
• A new "Undelete" function is available on the context menu to restore deleted resources, including complete deleted subtrees.
• The full text search has been greatly improved so that individual resource properties or fields from XML content can be searched directly.
• A "time warp" feature in the Workplace now allows users to view resources with date expired / date released settings.
• Auto correction for structured XML contents now allows changes to the XML schema of existing resources.
• A configurable search tool is now available for content managers in the Workplace.
• A "permalink" handler for resources is available for external references in case a resource is moved or renamed.
• Link management support has been added in editors for standard HTML tags 'area', 'object' & 'embed'.
• The core database structure has been optimized.
• JSP 2.0 and Servlet 2.4 are now used by default.

Backward compatibility

OpenCms 7.0.5 is fully backward compatible to all prior 7.0.x versions. We recommend everyone who uses an earlier version of OpenCms to update to the 7.0.5 release.

OpenCms 7 is largely backward compatible with version 6. Most templates and other OpenCms developed code from version 6 should work "out of the box" with version 7. A number of API methods from OpenCms 6 have been marked as "deprecated". In case you have made extensive use of OpenCms internal classes and APIs from version 6, there may be some changes required in your code. However, in most cases this should not take longer than a couple of hours.

Please note that since OpenCms 7 uses JSP 2.0 and Servlet 2.4 standards by default, you may have to change that back to JSP 1.2 / Servlet 2.3 so your existing OpenCms JSP templates from OpenCms 6 run without change. You must edit the "web-app" node in the OpenCms web.xml file to do that.

Compatibility with Java versions, Servlet containers and Databases

OpenCms 7 has been written and tested using Java 1.5 / 1.6. It works well with Java 1.4 using the optional "Java 1.4 compatibility package". We have tested only with SUNs version of the JDK. However, OpenCms has no dependencies to sun.* packages so it should in theory run with all compliant JVMs.

We have tested this release on the Tomcat servlet engine. OpenCms works "out of the box" with Tomcat 5.5, which we recommend. Others have reported deploying OpenCms successfully on other servlet containers like JBoss, BEA and Websphere. We appreciate any feedback regarding other servlet containers.

On the database side, we have tested with MySQL 4.0.x, MySQL 4.1, MySQL 5.x, Oracle 9.x and Oracle 10.x, as well as PostgreSQL 8.2.x and 7.4.x, MS SQL Server 2000 / 2003, DB2 9.1 and HSQLDB 1.8.0. The automatic update wizard for OpenCms 7 supports MySQL, Oracle and PostgreSQL.

Regarding version numbers and CVS build tags

In case you want to check out OpenCms from the CVS, please keep the following in mind: The CVS tag numbers for all OpenCms 7 releases are "build_7_0_x", so the 7.0.5 release is tagged "build_7_0_5". Development of maintenance releases (like 7.0.5) is currently done in CVS HEAD.

How you can help

Contributions to the OpenCms core development are most welcome. Please contact the core development team on the opencms-dev mailing list in case you are interested in supporting the development of OpenCms.

Please use our Bugzilla to report bugs in this release: http://bugzilla.opencms.org/

Thank you for using OpenCms and have fun with OpenCms 7.0.5 :-)