9.0.2
💥 Important
Important Change
With this update to version 9.0.2, the web service URLConverter no longer supports the file protocol (file://) in a URL.
For server security reasons and to prevent security vulnerabilities, access to local server resources via the file protocol is completely blocked in version 9.0.2. This is an important change that may require adjustments to client applications. The corresponding resource must always be accessed via the http:// or https:// (recommended) protocol.
This change also affects HTML documents or HTML-based emails (web service Converter) if they reference content (e.g., via <iframe> tag) that is to be retrieved via the file:// protocol. These calls to local file resources are also completely blocked.
🔧 Security
- Update OpenJDK to 11.0.28+6
- Update Tomcat to 10.1.43
- Update Chromium to 138.0.7204.157
- Update Maven libraries
- WEBPDF-1977 File Protocol no longer allowed in HTML documents (see note above)
🐛 Bug Fix
- WEBPDF-1904 Exception if "Producer" string of the metadata contains null bytes
- WEBPDF-1968
NoReplaceflag in RPM package not set for configuration files