Deprecation Removal: UrlProvider Leftovers from lc-cae

Since link building for commerce URLs has already been moved to the commerce adapters, the UrlProviders in the lc-cae extension for commerce urls shouldn't be used anymore and were deprecated previously.

Follow Section, “Deprecation Removal: UrlProvider Leftovers from lc-cae” for upgrade information.

(CMS-21736)

Fix and Deprecate Method TransformImageService#getTransformationString

The method com.coremedia.cap.transform.TransformImageService#getTransformationString(...) has been changed to return null for non-existing blobs instead of throwing a NullPointerException. Further the method has been marked as deprecated for removal because it was not intended to be public API.

(CMS-21919)

Freemarker Macro {{<@cm.message />}} Escapes Output by Default

While the output of the Freemarker function {{$

{cm.getMessage()}

}} is escaped by Freemarker, the same functionallity as Freemarcer macro <@cm.message /> was not. For security reasons we changed it, so both are escaped now by default. This is important if you add unchecked user input values into the message strings, like for example in search result headers.

Follow Section, “Freemarker Macro {{<@cm.message />}} Escapes Output by Default” for upgrade information.

(CMS-21409)