Converted `component-livecontext.xml` to spring boot autoconfiguration

The classpath resource /META-INF/coremedia/component-livecontext.xml provided by blueprint module lc-cae was removed. The replacement is the spring boot autoconfiguration com.coremedia.livecontext.cae.LcCaeAutoConfiguration

(CMS-15910)

security-services.xml

The security settings in apps/cae/core/cms-core/cae/cae-spring-security/src/main/resources/com/coremedia/cae/security-services.xml have been changed to also allow double encoded slashes and periods in URLs. This fixes e.g. the redirect after a successful login in Calista demo site.

(CMS-16217)

HTTP Strict-Transport-Security response header is not set by Apache anymore

The Apache that is deployed and configured by the provided Chef deployment was always setting the HTTP Strict-Transport-Security response header for HTTP and HTTPS requests. The HTTP Strict-Transport-Security header is not needed for HTTP requests and for HTTPS requests it was set twice, with different values, which leads to undefined behavior. As the CAE always sets the HTTP Strict-Transport-Security header (only) when it's actually required, it has been disabled in the Apache configuration.

(CMS-16146)

Prevent double escaping of some image links provided by BlueprintFreemarkerFacade

To prevent double escaping links provided by getImageLinksForAspectRatios and getImageLinksForAspectRatios in the BlueprintFreemarkerFacade are no longer escaped. Escaping is already handled by Freemarker when the link is rendered inside a template.

(CMS-15957)

Blueprint's `ErrorAndExceptionMappingResolver` now autowires list of `ErrorAndExceptionHandler` beans

com.coremedia.blueprint.cae.exception.resolver.ErrorAndExceptionMappingResolver was changed so that it autowires the list of com.coremedia.blueprint.cae.exception.handler.ErrorAndExceptionHandler beans as constructor argument. The corresponding setter was removed.

Follow Section, “Blueprint's `ErrorAndExceptionMappingResolver` now autowires list of `ErrorAndExceptionHandler` beans” for upgrade information.

(CMS-15909)

Hybris Vendor ID

The Vendor ID for the Hybris connection via Commerce Hub is now "hybris" instead of "SAP Hybris". The only using code in com.coremedia.livecontext.asset.ProductCatalogPictureHandler was adapted accordingly.

(CMS-15623)