Orbeon Forms 2020.1.6

Friday, December 17, 2021

Today we released Orbeon Forms 2020.1.6 PE. This maintenance release contains security updates and bug-fixes and is recommended for all users of:

• Orbeon Forms 2020.1.5 PE

• Orbeon Forms 2020.1.4 PE

• Orbeon Forms 2020.1.3 PE

• Orbeon Forms 2020.1.2 PE

• Orbeon Forms 2020.1.1 PE

• Orbeon Forms 2020.1 PE

This release addresses the following issues since Orbeon Forms 2020.1.5 PE:

• Upgrade to log4j 2.x (#4373)

• "SecurityError: Attempt to use history.replaceState() more than 100 times per 30 seconds" (#5052)

• Resolve symbolic links when checking for temporary file (#4761)

• Improve reading of labels for date-time control (#4831)

• Control Settings allow going to section template control via "Previous" (#5073)

• Keyboard shortcuts stop working after dialog Prev/Next (#5077)

• Avoid invalid role="navigation" on <ul> (#5079)

• Forward all request attributes in internal requests (#5081)

• Process not found when using publish API (#5082)

• In 12-hour, midnight should show as 12:00 am, not 0:00 am (#5087)

• Don't log passwords when debug logging all properties (#5090)

• HTTP Service Editor misses request params column labels (#5093)

• Make xforms.resources cache non-disk-persistent (#5092)

• Form Runner function returning whether we are editing a draft (#5060)

• fr:mode() to return edit when editing autosaved data (#5066)

• New filter to log the body of incoming requests (#5098)

• Third-party library upgrades

For more on the Log4j vulnerability issue, see our blog post.

UPDATES:

• 2020.1.6.1 addresses a regression introduced with the fix for #5066

• 2020.1.6.2 upgrades Log4j to version 2.17.1 to address the latest vulnerabilities

You can download the latest version of Orbeon Forms from the downloads page.

Don't forget to grab a trial license for the PE version.

Please send feedback via Twitter, Bluesky, or the forum.

We hope you enjoy this release!