OXIESEC PANEL

Name	Size	Modified	Perms	Actions
📁 ..	-	12/29/2025 02:30:47 AM	rwxr-xr-x
📄 Notes.txt	3.36 KB	05/07/2025 11:17:44 AM	rw-r--r--	Delete
📄 _app.php	613 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 app.php	19 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 changelog.txt	4.15 KB	12/04/2025 07:27:08 AM	rw-r--r--	Delete
📄 clone.php	8.49 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📄 concrete.php	738 bytes	12/04/2025 07:27:08 AM	rw-r--r--	Delete
📄 database.php	431 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 edit.php	4.94 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📄 edit.xml	433 bytes	01/04/2022 10:12:20 AM	rw-r--r--	Delete
📄 extend.php	16.64 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📄 fileindex.php	98 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 gen_app.php	373 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📁 images	-	12/05/2025 02:30:41 AM	rwxr-xr-x
📄 import.php	5.16 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📄 info.xml	3.69 KB	12/04/2025 07:27:08 AM	rw-r--r--	Delete
📄 install.js	921 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 install.php	8.01 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📄 install.xml	841 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 md5	1.54 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📁 php53	-	12/05/2025 02:30:41 AM	rwxr-xr-x
📁 php56	-	12/05/2025 02:30:41 AM	rwxr-xr-x
📁 php71	-	12/05/2025 02:30:41 AM	rwxr-xr-x
📁 php81	-	12/05/2025 02:30:41 AM	rwxr-xr-x
📁 php82	-	12/05/2025 02:30:41 AM	rwxr-xr-x
📄 site.php	429 bytes	05/18/2024 08:19:58 AM	rw-r--r--	Delete
📄 update_pass.php	517 bytes	12/23/2021 09:54:36 AM	rw-r--r--	Delete
📄 upgrade.php	5.9 KB	12/04/2025 10:26:12 AM	rw-r--r--	Delete
📄 upgrade.xml	1.19 KB	12/23/2021 09:54:36 AM	rw-r--r--	Delete

Editing: changelog.txt

9.4.7 Release Notes

Behavioral Improvements

YouTube block view now contains iframe code to help YouTube render better under certain stricter web server settings (thanks MarcoKuoni)
    We now define operation IDs for API endpoints (thanks hissy)
    On the Dashboard > Database Entities page we now show entities that are defined using PHP attributes (not just entities) (thanks mlocati)

Bug Fixes

Fixed: Conversations file attachment icons and file attachment area are not formatted properly.
    Fixed: conversation loader shows properly.
    Fixed: The close “X” of Workflow pop-up only has Atomik css & doesn’t show up in other theme
    Fixed: Subscribe to Conversation "X" button does Unsubscribe/Subscribe button action
    Fixed incorrect edit profile validation on username.
    Fixed inability to rename a form block’s name through the block editing dialog once it has been added to the page.
    Fixed bug when regional jQuery UI languages did not load in time (thanks mlocati)

Developer Updates

Updated dependencies to their latest minor versions.

Security Updates

Patched Symfony Foundation libraries to resolve this security issue: https://symfony.com/blog/cve-2025-64500-incorrect-parsing-of-path-info-can-lead-to-limited-authorization-bypass
    Updated enshrined/svg-sanitized, which improves security scanning of SVG files (see https://www.cve.org/CVERecord?id=CVE-2025-55166).
	
9.4.6 Release Notes

New Features

We now check whether the web server appears to be properly configured to support pretty URLs on the URLs and Redirection Dashboard page, and present warnings to the user prior to allowing them to set this configuration value if it appears that it will cause their site to cease rendering (thanks mlocati)

Behavioral Improvements

Added additional logging to pages, files, Express entries/objects, and calendar events.
    The “Remove Old Page Versions” task is now more efficient and handles larger data sets much more reliably (thanks biplobice)
    We now show seconds in the log entry timestamp.
    We now only redirect requests to URLs where trailing slash settings don’t match when using GET requests, rather than all requests (thanks JohnTheFish)

Bug Fixes

Fixed bug that caused container instances in the database to be deleted and recreated on each page load, potentially dramatically increasing DB usage on pages where containers were used.
    Fixed bug where reordering Express entries on associations didn’t work under certain conditions.
    Fixed: Can not go to pages on other sites from sitemap panel when using multisite (thanks hissy)
    Fixed inability to retrieve group details over the REST API.
    Fixed: ClassNotFoundError on accessing open api spec (thanks hissy)
    Fixed: When using multisite, page drafts can be created within the wrong site (thanks hissy)
    Fixed bug where Page List block pagination interface was buggy after update to 9.4.5 under certain conditions.
    Fixed: When you hover over the tooltip icon near Image hover of Image Block, the tooltip does not appear (thanks SashaMcr)
    Miscellaneous PHP8 fixes and code cleanup (thanks biplobice)
    Made some untranslatable strings translatable (thanks wtflm)
	
9.4.5 Release Notes

Behavioral Improvements

We now no longer wrap Grid Framework-based layouts in an extra row and column class.
    Fixed some UI quirks when mousing over table-based list views in the Dashboard.

Bug Fixes

Fixed: pages with editing canonical URLs are not correctly marked as in trash.
    Fixed: Nesting "Free-Form Layout" type Areas/Layouts breaks honouring the "Spacing" value
    Fixed: 5xx Server Error for calendar RSS feed.
    Fixed bug where privacy policy accept banner appeared strangely on the Stacks Dashboard page.
    Fixed bug where adding blocks to areas in the Dashboard Welcome screen would only allow you to add one block, and then you would be forced to reload the page.
    Fixed bug where saving theme customizations could force custom CSS dialog to render multiple times.
    Fixed notice error when configuring legacy themes.

Developer Updates

$controller->buildRedirect(...) can now take a page object as its first argument (thanks mnakalay)