Upgrade 14.2.1 to 14.2.2

Overview

This guide describes how to upgrade a Bloomreach Content implementation from version 14.2.1 to 14.2.2.

Relevant Changes

SecureCmsResourceServlet Default Behavior Update

In versions 14.2.1 and earlier, the SecureCmsResourceServlet only served Experience Manager resources—such as JavaScript, CSS, and font files—from JAR files to authenticated CMS users. This restriction could prevent external frontend applications from accessing these resources, which are required for channel editing integration.

Starting with version 14.2.2, the SecureCmsResourceServlet no longer requires an authenticated CMS session to serve these resources by default. This change improves compatibility with external frontend applications.

This update is backward-compatible. Most projects will not require any changes or additional configuration.

If you need to restore the previous behavior (requiring authentication), configure the cmsSecure init-param on the SecureCmsResourceServlet in your CMS web application's web.xml file. Example configuration:

<servlet>
  <servlet-name>ServletName</servlet-name>
  <servlet-class>org.onehippo.cms7.utilities.servlet.SecureCmsResourceServlet</servlet-class>;
  <init-param>
    <param-name>cmsSecure</param-name>
    <param-value>true</param-value>
  </init-param>
  <!-- additional init-params here /-->
</servlet>
copy