Aller au contenu principal
Jahia Store
FR

JCR account creation notification

community
Télécharger 2.0.1

Informations

Identifiant du module
jcr-account-creation-notification
Identifiant de groupe
org.jahia.community
Statut
community
Catégorie
Admin Features
Auteur
Florent BOURASSE
Site web du développeur
http://www.jahia.com
Nécessite Jahia
8.2.1.0
Mis à jour
2026-07-09
Source
scm:git:git@github.com:Jahia/jcr-account-creation-notification.git
Étiquettes
  • security
  • administration

Sends an email notification whenever a JCR user account (jnt:user) is created under /users. Uses the mail service already configured in Jahia, with fully customisable subject and body templates. Bulk imports are excluded — only interactive user creations trigger the notification.

Captures d'écran

Versions

Highlights

  • Hardened the email notification listener against log, HTML and header injection.
  • Brought the admin UI up to WCAG 2.1 AA accessibility compliance.
  • Addressed multiple Dependabot / CVE alerts (systeminformation, @babel/plugin-transform-modules-systemjs, fast-uri, axios, ip-address).
  • Added Dependabot configuration and refreshed security/contrib documentation.

Features

  • Dependabot automation — added dependabot.yml to enable automated dependency version updates (00175c4).
  • Configuration safety — added a placeholder to the OSGi .cfg to prevent the shipped configuration from silently overriding deployment-time values (143fedf).

Fixes

Security hardening

  • Email injection hardening (5d04c1a) — HTML-escape {username}{creator} and {time} before injecting into HTML email bodies; strip CR/LF from the subject template to block header injection; sanitize values written to logs to prevent log injection. Touches JcrAccountCreationListener.java.
  • CVE fix — systeminformation upgraded 5.31.5 → 5.31.6 via resolution override (d5a7e6c).
  • Dependabot alerts — upgraded @babel/plugin-transform-modules-systemjsfast-uriaxiosip-address (49d812a). Regenerates yarn.lock and tests/yarn.lock.

Accessibility (WCAG 2.1 AA)

  • Initial accessibility pass on the admin UI (50391d2) — major rework of JcrAccountCreationNotification.jsx / .scss plus a new locale string in en.json.
  • Follow-up WCAG fixes (e89f2f3) — addresses MAJOR-01..04 and MINOR-01..03, 06; notably replaces the single dynamic-role live region with two separate regions for status vs. alerts.

Refactoring / Chores

  • Repo docs — CLAUDE.md renamed to AGENTS.md, with CLAUDE.md kept as a small reference pointer (fb9c1ac).
  • Initial Claude/agent context added to the repo (4536c99).
  • Cleanup — large yarn.lock cleanup / regeneration (363d68e).
  • SECURITY.md streamlined: removed the supported-versions section and linked out to centralized security information (900d11f).

Full Changelog2_0_0...2_0_1

Nécessite Jahia 8.2.1.0Mis à jour 2026-05-19
Nécessite Jahia 8.2.1.0Mis à jour 2026-04-21