v4.5.15.20 release

v4.5.15.20 had one improvement and seven bug fixes.

Significant improvement

• Added the query parameter _callers to URLs to display levels in a stack trace. For example, with _callers=10, the profiler provides 10 levels of stack trace.

Significant defects addressed

• Corrected an issue causing incorrect layout and UI behavior in the preview pane.
• Corrected an issue causing the preview pane's width to equal the content edit form's width on initial load.
• Corrected an issue that did not account for the Zip Slip vulnerability. A security check now exists to detect and avoid this vulnerability.
• Corrected an issue preventing rCDA schema generation when a field's internal name has a prefix containing a dash. For example, a prefix declared as String PREFIX = "brightspot.custom-components." prevented schema generation.
• Corrected an issue preventing preview-to-edit containers from rendering fields correctly when those fields do not have a valid preview.
• Corrected an issue preventing updates to scheduled revisions from being saved. For example, an editor created a new revision of a homepage, and added a module to the contents. The editor then scheduled this revision. Subsequently, the editor removed a module from the scheduled homepage's contents, and scheduled this new revision. The removed module still appeared. Correcting this issue introduced a breaking change described below.
• Corrected an issue that caused the method SegmentationDatabase#personalize to trigger a large number of extraneous reference resolves.
  

Breaking changes

• In the class com.psddev.cms.db.Draft:
  
  • The method void update(Map, Object, Map, boolean) has been removed.
  • The method void update(Map, Object) is still available.