dev  

Messages by Date

• 2026/11/11 [PR] Redesign the categories page [roller] snoopdave (via GitHub) via dev
• 2026/11/11 [PR] Tidy the install result pages and fix rough edges found upgrading to 7.0 [roller] snoopdave (via GitHub) via dev
• 2026/11/11 Re: [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/11 Re: [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/11 Re: [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/11 Re: [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/11 Re: [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/11 [PR] Move validate email address to page rather than in global roller.js [roller] gregh3269 (via GitHub) via dev
• 2026/11/11 Re: [PR] Move validate email address to page rather than in roller.js [roller] gregh3269 (via GitHub) via dev
• 2026/11/11 Re: [PR] Move validate email address to page rather than in roller.js [roller] Greg Huber
• 2026/11/11 Re: [PR] Move validate email address to page rather than in roller.js [roller] gregh3269 (via GitHub) via dev
• 2026/11/11 [PR] Move validate email address to page rather than in roller.js [roller] gregh3269 (via GitHub) via dev
• 2026/11/10 CVE-2026-105153: Apache Roller: XML external entity processing in AtomPub entry parsing David M. Johnson via dev
• 2026/11/10 CVE-2026-111824: Apache Roller: Stored cross-site scripting through custom-theme resource URLs David M. Johnson via dev
• 2026/11/10 [ANNOUNCE] Apache Roller 6.1.7 released Dave
• 2026/11/10 CVE-2026-122300: Apache Roller: Limited weblog members can remove or change published entries David M. Johnson via dev
• 2026/11/10 CVE-2026-118414: Apache Roller: Stored cross-site scripting through the weblog description David M. Johnson via dev
• 2026/11/10 CVE-2026-118411: Apache Roller: Cross-site request forgery through GET requests to administrative actions David M. Johnson via dev
• 2026/11/10 CVE-2026-118413: Apache Roller: Stored cross-site scripting through imported blogroll links David M. Johnson via dev
• 2026/11/10 CVE-2026-118412: Apache Roller: Disabled accounts can sign in through OpenID David M. Johnson via dev
• 2026/11/10 CVE-2026-118410: Apache Roller: Unpublished entries remain readable through search after AtomPub unpublish David M. Johnson via dev
• 2026/11/10 CVE-2026-105154: Apache Roller: Cross-site request forgery in Planet administration lets an attacker make the server fetch arbitrary URLs David M. Johnson via dev
• 2026/11/10 CVE-2026-108338: Apache Roller: Stored cross-site scripting through AtomPub entry tags David M. Johnson via dev
• 2026/11/10 CVE-2026-118409: Apache Roller: Commenter email addresses recoverable through public search David M. Johnson via dev
• 2026/11/10 CVE-2026-118408: Apache Roller: Unpublished entries of other weblogs readable through preview David M. Johnson via dev
• 2026/11/10 CVE-2026-105152: Apache Roller: Weblog template access to wrapped objects exposes another user's password hash David M. Johnson via dev
• 2026/11/10 CVE-2026-118405: Apache Roller: Exposure of other users' email addresses through the user search David M. Johnson via dev
• 2026/11/10 [RESULT][VOTE] Release Apache Roller 6.1.7 (RC5) Dave
• 2026/11/10 Re: [VOTE] Release Apache Roller 6.1.7 (RC5) Dave
• 2026/11/10 Re: [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/10 Re: [VOTE] Release Apache Roller 6.1.7 (RC5) Greg Huber
• 2026/11/10 Re: verify comment post 6.1.7 (RC5) Greg Huber
• 2026/11/10 Re: verify comment post 6.1.7 (RC5) Greg Huber
• 2026/11/09 [PR] Remove the obsolete weblog update ping feature [roller] snoopdave (via GitHub) via dev
• 2026/11/09 Re: [VOTE] Release Apache Roller 6.1.7 (RC5) Matt Raible
• 2026/11/09 Re: verify comment post 6.1.7 (RC5) Matt Raible
• 2026/11/09 Re: [PR] Use Apache Trusted Releases in the roller-release skill [roller] mraible (via GitHub) via dev
• 2026/11/09 Re: [PR] Use Apache Trusted Releases in the roller-release skill [roller] snoopdave (via GitHub) via dev
• 2026/11/09 Re: [PR] Update Guava to 33.7.2 [roller] snoopdave (via GitHub) via dev
• 2026/11/08 [VOTE] Release Apache Roller 6.1.7 (RC5) Dave
• 2026/11/08 Re: [PR] Apply the Limited role to each entry in the entry editor [roller] snoopdave (via GitHub) via dev
• 2026/11/08 Re: Roller 7: drop weblog update ("ping") support? Matt Raible
• 2026/11/08 verify comment post 6.1.7 (RC5) Greg Huber
• 2026/11/07 Re: [PR] Adopt Apache Trusted Releases workflow for Roller 7 [roller] mraible (via GitHub) via dev
• 2026/11/07 [PR] Adopt Apache Trusted Releases workflow for Roller 7 [roller] snoopdave (via GitHub) via dev
• 2026/11/07 Roller 7: drop weblog update ("ping") support? Dave
• 2026/11/07 Re: [PR] Apply the Limited role to each entry in the entry editor [roller] snoopdave (via GitHub) via dev
• 2026/11/07 [PR] Update Guava to 33.7.2 [roller] snoopdave (via GitHub) via dev
• 2026/11/07 Re: [PR] Merge branch 'roller-6.1.x' into master [roller] snoopdave (via GitHub) via dev
• 2026/11/07 Re: [PR] Send weblog update pings without an XML-RPC client [roller] snoopdave (via GitHub) via dev
• 2026/11/07 [PR] Merge branch 'roller-6.1.x' into master [roller] snoopdave (via GitHub) via dev
• 2026/11/07 resource package scanning in struts Greg Huber
• 2026/11/06 [PR] Apply the Limited role to each entry in the entry editor [roller] snoopdave (via GitHub) via dev
• 2026/11/06 [CANCEL] [VOTE] Release Apache Roller 6.1.7 (RC4) Dave
• 2026/11/06 Re: [PR] Apply the Limited role to each entry in the entry editor [roller] snoopdave (via GitHub) via dev
• 2026/11/06 Re: [PR] Send weblog update pings without an XML-RPC client [roller] github-advanced-security[bot] (via GitHub) via dev
• 2026/11/06 Re: [PR] Send weblog update pings without an XML-RPC client [roller] snoopdave (via GitHub) via dev
• 2026/11/05 Re: [PR] Send weblog update pings without an XML-RPC client [roller] snoopdave (via GitHub) via dev
• 2026/11/05 Re: [PR] Send weblog update pings without an XML-RPC client [roller] github-advanced-security[bot] (via GitHub) via dev
• 2026/11/05 [PR] Send weblog update pings without an XML-RPC client [roller] snoopdave (via GitHub) via dev
• 2026/11/04 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/04 Re: [PR] Fix minor typos in comments and Javadocs [roller] snoopdave (via GitHub) via dev
• 2026/11/04 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/03 Re: [PR] Media library redesign [roller] mraible (via GitHub) via dev
• 2026/11/03 [PR] Fix minor typos in comments and Javadocs [roller] siddiqueirshad (via GitHub) via dev
• 2026/11/02 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/02 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/02 Media library redesign Dave
• 2026/11/02 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/02 Re: [PR] Add three responsive light and dark blog themes [roller] mraible (via GitHub) via dev
• 2026/11/01 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/01 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/01 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/01 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/11/01 Re: verify comment post 6.1.7 (RC4) Dave
• 2026/11/01 Re: [PR] Admin UI polish: pagination, accordions, spacing, date fields [roller] snoopdave (via GitHub) via dev
• 2026/11/01 Re: verify comment post 6.1.7 (RC4) Greg Huber
• 2026/10/31 Re: [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/10/31 Re: [PR] Admin UI polish: pagination, accordions, spacing, date fields [roller] snoopdave (via GitHub) via dev
• 2026/10/31 [PR] Let the theme page recover a weblog whose shared theme is not installed [roller] snoopdave (via GitHub) via dev
• 2026/10/31 Re: [PR] Add a roller-board-report developer skill for the quarterly board report [roller] snoopdave (via GitHub) via dev
• 2026/10/31 Re: [PR] Wait for the advanced settings to open before checking the publishing time layout [roller] snoopdave (via GitHub) via dev
• 2026/10/31 [PR] Media library redesign [roller] snoopdave (via GitHub) via dev
• 2026/10/31 Re: verify comment post 6.1.7 (RC4) Dave
• 2026/10/31 Re: [PR] Add a roller-board-report developer skill for the quarterly board report [roller] snoopdave (via GitHub) via dev
• 2026/10/31 Re: [PR] Let the theme page recover a weblog whose shared theme is not installed [roller] snoopdave (via GitHub) via dev
• 2026/10/31 Re: [PR] Wait for the advanced settings to open before checking the publishing time layout [roller] snoopdave (via GitHub) via dev
• 2026/10/31 verify comment post 6.1.7 (RC4) Greg Huber
• 2026/10/30 Re: [VOTE] Release Apache Roller 6.1.7 (RC4) Matt Raible
• 2026/10/30 [VOTE] Release Apache Roller 6.1.7 (RC4) Dave
• 2026/10/30 Re: PRs ready to merge Dave
• 2026/10/30 Re: PRs ready to merge Dave
• 2026/10/30 Re: [PR] Wait for the advanced settings to open before checking the publishing time layout [roller] via GitHub
• 2026/10/30 PRs ready to merge Matt Raible
• 2026/10/29 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/29 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/29 Re: [PR] Show blogroll names and descriptions as plain text [roller] via GitHub
• 2026/10/29 [PR] Show blogroll names and descriptions as plain text [roller] via GitHub
• 2026/10/29 Re: [PR] Require POST for action methods that change data [roller] via GitHub
• 2026/10/29 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/29 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/29 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/29 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/29 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/29 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/29 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/29 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/29 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/29 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/29 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/29 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/29 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/29 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/29 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/29 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/29 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/29 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/29 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/29 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/29 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/29 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/29 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/29 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/29 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/29 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/29 [PR] Wait for the advanced settings to open before checking the publishing time layout [roller] via GitHub
• 2026/10/28 Re: [PR] Add a roller-board-report developer skill for the quarterly board report [roller] via GitHub
• 2026/10/28 Re: [PR] Admin UI polish: pagination, accordions, spacing, date fields [roller] via GitHub
• 2026/10/28 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/28 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/28 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/28 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/28 [PR] Add a roller-board-report developer skill for the quarterly board report [roller] via GitHub
• 2026/10/28 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/28 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/28 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/28 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/28 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/28 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/28 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/28 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/28 Re: [PR] Add three responsive light and dark blog themes [roller] via GitHub
• 2026/10/28 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/28 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/28 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/28 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/28 [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/27 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/27 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/27 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/27 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/27 [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/27 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/27 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/27 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/27 Re: [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/27 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/27 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/27 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/27 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/27 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/27 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/27 Re: [PR] Require POST or a salt for action methods that change data [roller] via GitHub
• 2026/10/27 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/27 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/27 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/27 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/27 Re: [PR] Keep blogroll links to web and relative URLs [roller] via GitHub
• 2026/10/27 Re: [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/27 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/27 [PR] Require a role in the weblog for page and resource previews [roller] via GitHub
• 2026/10/27 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/27 Re: [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/27 Re: [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/27 Re: [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/27 Re: [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/27 [PR] Refuse disabled accounts when signing in with an OpenID URL [roller] via GitHub
• 2026/10/27 [PR] Match only user names in the user search for non-admins and escape LIKE wildcards [roller] via GitHub
• 2026/10/27 [PR] Drop an unclosed tag in removeHTML and print the weblog description as text on the main menu [roller] via GitHub
• 2026/10/27 [PR] Return only published entries from search and drop the index entry when AtomPub saves a draft [roller] via GitHub
• 2026/10/27 [PR] Limit search queries to the search fields and stop indexing comment email addresses [roller] via GitHub
• 2026/10/25 Re: [PR] Install guide: review optional features before enabling them [roller] via GitHub
• 2026/10/25 Re: [PR] Add three responsive light and dark blog themes [roller] via GitHub
• 2026/10/25 Re: [PR] Add three responsive light and dark blog themes [roller] via GitHub
• 2026/10/25 Re: [PR] Replace the Selenium suite with Playwright browser tests run across all auth methods [roller] via GitHub
• 2026/10/24 Re: [PR] Install guide: review optional features before enabling them [roller] via GitHub
• 2026/10/24 [PR] Install guide: review optional features before enabling them [roller] via GitHub
• 2026/10/24 [PR] Admin UI polish: pagination, accordions, spacing, date fields [roller] via GitHub
• 2026/10/24 Roller 6.1.7 RC3 files Dave
• 2026/10/24 Re: [PR] Add three responsive light and dark blog themes [roller] via GitHub
• 2026/10/24 Re: Pushing the pedals on Roller 6.1.7 and 7.0.0 Dave
• 2026/10/24 Re: [PR] Serve media found by a custom theme under the media rules [roller] via GitHub
• 2026/10/24 Re: [PR] Serve media found by a custom theme under the media rules [roller] via GitHub
• 2026/10/24 Re: Pushing the pedals on Roller 6.1.7 and 7.0.0 Dave
• 2026/10/24 Re: Pushing the pedals on Roller 6.1.7 and 7.0.0 Greg Huber
• 2026/10/23 Re: [PR] Convert the admin and editor UI from Bootstrap 3 to Bootstrap 5.3 (move #156 to master) [roller] via GitHub
• 2026/10/23 [PR] Convert the admin and editor UI from Bootstrap 3 to Bootstrap 5.3 (move #156 to master) [roller] via GitHub
• 2026/10/23 Re: [PR] Convert the admin and editor UI from Bootstrap 3 to Bootstrap 5.3 [roller] via GitHub
• 2026/10/23 Pushing the pedals on Roller 6.1.7 and 7.0.0 Dave
• 2026/10/19 Re: [PR] Replace OpenID 2.0 with OAuth 2.0/OIDC login (move #155 to master) [roller] via GitHub

• Earlier messages