Nuxeo 7.10-HF05

By Nuxeo

Download and install the latest hotfix to keep your Nuxeo up-to-date. Changes will take effects after restart. Please make sure you consult the page Hotfix management https://doc.nuxeo.com/x/SAalAQ for any additional manual action to complete the installation. No DDL statement is included in this hotfix Main corrections provided: * Fix persistent XSS * Make Elasticsearch STARTSWITH behave like in VCS for non ecm:path field * Fix select2 "Illegal Syntax for Set Operation” when clearing value in a list * User manager should not expose internally cached principals * Fix delegation when validating the form without filling the mandatory field * Fix starting URLs save with Kerberos Authentication * Fix group name extraction when workflow engine verifies if user is member of the group assigned to the task * Fix static context path in Spreadsheet Complete release note is available at: https://jira.nuxeo.com/secure/ReleaseNote.jspa?projectId=10011&version=17672