Updated (Embedded) Tomcat to 9.0.68

Updated (Embedded) Tomcat to version 9.0.68 to prevent potential CVE-2022-42252, although we don't use the vulnerable setting rejectIllegalHeader .

(CMS-22354)

Third-Party Update: commons-text

Apache commons-text has been updated to version 1.10.0 to avoid security vulnerability CVE-2022-42889.

(CMS-22268)

Added Nullability Annotations to Validator and ValidationService

Nullability annotations are added to Validator and ValidationService. Fixed a possible NullPointerException in com.coremedia.blueprint.common.services.validation.AbstractValidator.

(CMS-22183)

Fixed a Bug Regarding Annotation Lookup of Link Schemes

Lookup of @Link Annotation failed under certain conditions. This bug is fixed.

(CMS-22043)

Fixed the Order of the 'viewEngines' Bean

The type of the 'viewEngines' bean was changed to 'LinkedHashMap', so that custom view engines can be correctly prepended or appended.

(CMS-22031)

Bugfix: Issue with Responsive Image Delivery for Extremely Small Images

Delivery of responsive images could fail, if the original image is extremely small and no crops had been defined in CoreMedia Studio. More specifically, this issue arose for images whose dimensions were smaller than the corresponding aspect ratio.

(CMS-22011)

Fixed the Handling of Preview Date

Fixed the handling of preview date parameter, so that the preview date parameter is ignored by the live CAE.

(CMS-22001)

CORS Configurations are Now Ordered by Best-matching Path Pattern

The CORS configurations that are assembled from the cae.cors.* configuration properties are now sorted by best-matching URI templates , where configurations with more detailed path patterns win over those with more generic patterns.

(CMS-21878)

Bugfix: Image Map Hotzones Misplaced when "Fit Image to Crop"

Image Map hotzones could be misplaced in CAE and Headless Server rendering, if " Fit image to crop " is active on corresponding image. This change resolves the issue. Existing image map hotzones do not need to be changed.

(CMS-19436)

Fixed a Bug Regarding Encoding of Resource URLs

Resource URLS containing non URL characters were encoded twice. This bug has been fixed.

(CMS-19083)