Chapter 2. MTR 1.2.7
2.1. Known issues
The following known issues are in the MTR 1.2.7 release:
For a complete list of all known issues, see the list of MTR 1.2.7 known issues in Jira.
2.2. Resolved issues
MTR 1.2.7 has the following resolved issues:
MTR 1.2.0 fails with the Exception java.lang.ClassNotFoundException:org.eclipse.text.edits.MalformedTreeException
In earlier versions of MTR 1.2.z, when migrating an Application from JBoss Enterprise Application Platform (EAP) 7 to EAP 8, there could be a failure with the following java.lang.ClassNotFoundException
:
java.lang.ClassNotFoundException: org.eclipse.text.edits.MalformedTreeException from [Module "org.jboss.windup.ast.windup-java-ast:6.3.1.Final-redhat-00002_67e96e90-d3bc-44fe-8fc8-ac2abdeacc58" from AddonModuleLoader]
java.lang.ClassNotFoundException: org.eclipse.text.edits.MalformedTreeException from [Module "org.jboss.windup.ast.windup-java-ast:6.3.1.Final-redhat-00002_67e96e90-d3bc-44fe-8fc8-ac2abdeacc58" from AddonModuleLoader]
This issue has been resolved in MTR 1.2.7. (WINDUP-4200)
CVE-2022-36033: org.jsoup/jsoup
: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled
A flaw was discovered in jsoup
, which is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety.
An issue in jsoup
could incorrectly sanitize HTML, including javascript: URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default SafeList.preserveRelativeLinks option is enabled, HTML, including javascript: URLs crafted with control characters, will not be sanitized. Users are recommended to upgrade to MTR 1.2.7, which resolves this issue.
For more details, see (2022-36033).
For a complete list of all issues resolved in this release, see the list of MTR 1.2.7 resolved issues in Jira.