Confluence LTS Upgrade Woes. Trouble understanding Velocity and Allowlists. CSS. files now erroring?

[S t]

Hello, I have a Confluence data center i upgraded from 8.5.9 to 9.2.10 and I'm having general issues with my logs spitting out too many errors.

Problem 1 -

My first issue is with velocity erroring out in the logs, this may be related to Comments Manager by BeastieHut and have opened a ticket with them but as we wait I'm trying to understand what me, as an end user, can do with velocity. I stumble onto documentation about how to turn off velocity outright but it never seems to be work. I don't know where to find any allowlists for it so I'm just lost. Does anyone have any insight if these settings are for app makers or is this something that I, as a jira admin, can modify?

I've tried adding various lines of code to setenv, such as to both the JVM and at the bottom of the file but it won't disable. I tried using various commands such as .extra to allow whitelisting from the setenv file.

CATALINA_OPTS="-Datlassian.velocity.method.allowlist.debug=true ${CATALINA_OPTS}"

I've tried finding files that documentation say exist but I can't actually find the file where I can add things to the velocity allowlist. I'm just wondering if I'm missing some key piece of information as I've been unable to make progress on my side.

Problem 2 -

When I click on a comment box at the bottom of a page I get hit with 4800 lines of logs. Here are seemingly the important bits -

[cache.filecache.impl.OneStreamCache] tryStreamCallBack Problem caching to disk, skipping cache for this entry

java.lang.RuntimeException: Cannot read resource css/drag-and-drop.css




[webresource] writeTo error in 'Content.writeTo' for come.atlassian.confluence.plugins.drafg-and-drop:support/drag-and-drop.css

java.lang.RuntimeException: Cannot read resource css/drag-and-drop.css

Then I get these two errors repeated, but instead of not being able to read drag-and-drop.css, it turns into css/drop-zone.css, then css/drag-and-drop-overlay.css, ect. Each of these is followed by 100s of lines of errors. I'm wondering if this is something I need to manually fix or if some dependency or system plugin should be updated/installed? Was the jump too big? It goes back to am I missing some key information somewhere? Does the installer not come with everything I need for a smooth upgrade? The drag-and-drop jar file went from 8.5.9 to 19.2.34 and the permissions have been setup correctly.