Orbeon Forms
Search
⌃K

Orbeon Forms 2020.1.6

Friday, December 17, 2021
Today we released Orbeon Forms 2020.1.6 PE. This maintenance release contains security updates and bug-fixes and is recommended for all users of:
This release addresses the following issues since Orbeon Forms 2020.1.5 PE:
  • Upgrade to log4j 2.x (#4373)
  • "SecurityError: Attempt to use history.replaceState() more than 100 times per 30 seconds" (#5052)
  • Resolve symbolic links when checking for temporary file (#4761)
  • Improve reading of labels for date-time control (#4831)
  • Control Settings allow going to section template control via "Previous" (#5073)
  • Keyboard shortcuts stop working after dialog Prev/Next (#5077)
  • Avoid invalid role="navigation" on <ul> (#5079)
  • Forward all request attributes in internal requests (#5081)
  • Process not found when using publish API (#5082)
  • In 12-hour, midnight should show as 12:00 am, not 0:00 am (#5087)
  • Don't log passwords when debug logging all properties (#5090)
  • HTTP Service Editor misses request params column labels (#5093)
  • Make xforms.resources cache non-disk-persistent (#5092)
  • Form Runner function returning whether we are editing a draft (#5060)
  • fr:mode() to return edit when editing autosaved data (#5066)
  • New filter to log the body of incoming requests (#5098)
  • Third-party library upgrades
For more on the Log4j vulnerability issue, see our blog post.
UPDATES:
  • 2020.1.6.1 addresses a regression introduced with the fix for #5066
  • 2020.1.6.2 upgrades Log4j to version 2.17.1 to address the latest vulnerabilities
You can download the latest version of Orbeon Forms from the downloads page.
Don't forget to grab a trial license for the PE version.
Please send feedback via Twitter, Mastodon, or the forum.
We hope you enjoy this release!
Previous
Orbeon Forms 2021.1
Next
Orbeon Forms 2019.2.4
Last modified 6mo ago