Servoy 8.1.1 Release Candidate

Release notes for Servoy betas

Servoy 8.1.1 Release Candidate

Postby jcompagner » Thu Oct 13, 2016 11:44 am

We are pleased to announce the availability of Servoy 8.1.1 release candidate 1 (releasenumber 3028)

This version is available through the download at the Servoy website
and through the update site url: http://download.servoy.com/developer/8x ... candidate/


Fixes and improvements in this release:

Cross-Site Scripting (XSS):
The big item for this release is that we changed the way servoy displays and execute html with javascript for
the webclient and ngclient, see these 2 wike pages also for settings and usefull info

https://wiki.servoy.com/pages/viewpage. ... d=23397000
https://wiki.servoy.com/display/DOCS/Security+settings

By default now servoy will not allow javascript or other dangerous html things to be inserted into labels or html area's as is.
It will sanatize (strip) the html of that. You can override these setting on various level, the best way is to do it on element level, try to avoid setting it on solution level or on all solutions (through the admin page setting)
Because then you really need to be sure that all data that you show in html area's or labels are coming from trusted sources (like pure design time values) that they are not coming from data.

Becaue of these fixes the added a jsoup.jar to the wrapper.conf and batch/sh files. If you upgrade a server be sure to check the wrapper configuration or batch files where you start the application server with. (classpath of wrapper should contain wrapper.java.classpath.49=lib/jsoup.jar, same goes for the classpath of the sh/batch files)

Performance:
We changed the way how data is pushed the first time or the next time a form is shown, the propertie values are now pushed way earlier then before. For example a tabpanel component will have all the tabs (also the one added through runtime api, elements.tabpanel.addTab) and the selected tabindex right away when it is being constructed. Only actual data from dataproviders could come a bit later.

In memory foundsets:
Design time foundsets are now auto created (with no data) if just used before creating it with: dataset.createDataSource()
databaseManager.dataSourceExists() will always return true for design time based in memory datasources

issues fixed see our wiki: https://wiki.servoy.com/display/DOCS/8.1.1+RC

Previous release notes of 8: this page
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8863
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet

Re: Servoy 8.1.1 Release Candidate

Postby logicimpresa » Thu Oct 20, 2016 8:06 pm

Hi, I cannot access to Developer because request a userid and password for crm.servoy and marketplace.
I use my user and password associated to Servoy Talk but I can't login.
How to solve this?
Thanks
Gianluca Zanini
Logic Impresa - Italy
SAN Partner
Best BAP development 2014
Eager Beaver 2013
Servoy Valued Professional 2012
User avatar
logicimpresa
 
Posts: 65
Joined: Sun May 01, 2011 3:58 pm
Location: Bernate Ticino (MI) - Italy

Re: Servoy 8.1.1 Release Candidate

Postby Andrei Costescu » Fri Oct 21, 2016 7:59 am

That should be fixed now.
Andrei Costescu
Servoy
Andrei Costescu
 
Posts: 1018
Joined: Tue Jun 26, 2007 3:14 pm

Re: Servoy 8.1.1 Release Candidate

Postby logicimpresa » Fri Oct 21, 2016 2:42 pm

Work: thanks Andrei
Gianluca Zanini
Logic Impresa - Italy
SAN Partner
Best BAP development 2014
Eager Beaver 2013
Servoy Valued Professional 2012
User avatar
logicimpresa
 
Posts: 65
Joined: Sun May 01, 2011 3:58 pm
Location: Bernate Ticino (MI) - Italy


Return to Latest Releases

Who is online

Users browsing this forum: No registered users and 2 guests