Orbeon Forms 2020.1.6

Friday, December 17, 2021

Today we released Orbeon Forms 2020.1.6 PE. This maintenance release contains security updates and bug-fixes and is recommended for all users of:

This release addresses the following issues since Orbeon Forms 2020.1.5 PE:

  • Upgrade to log4j 2.x (#4373)

  • "SecurityError: Attempt to use history.replaceState() more than 100 times per 30 seconds" (#5052)

  • Resolve symbolic links when checking for temporary file (#4761)

  • Improve reading of labels for date-time control (#4831)

  • Control Settings allow going to section template control via "Previous" (#5073)

  • Keyboard shortcuts stop working after dialog Prev/Next (#5077)

  • Avoid invalid role="navigation" on <ul> (#5079)

  • Forward all request attributes in internal requests (#5081)

  • Process not found when using publish API (#5082)

  • In 12-hour, midnight should show as 12:00 am, not 0:00 am (#5087)

  • Don't log passwords when debug logging all properties (#5090)

  • HTTP Service Editor misses request params column labels (#5093)

  • Make xforms.resources cache non-disk-persistent (#5092)

  • Form Runner function returning whether we are editing a draft (#5060)

  • fr:mode() to return edit when editing autosaved data (#5066)

  • New filter to log the body of incoming requests (#5098)

  • Third-party library upgrades

For more on the Log4j vulnerability issue, see our blog post.

UPDATES:

  • 2020.1.6.1 addresses a regression introduced with the fix for #5066

  • 2020.1.6.2 upgrades Log4j to version 2.17.1 to address the latest vulnerabilities

You can download the latest version of Orbeon Forms from the downloads page.

Don't forget to grab a trial license for the PE version.

Please send feedback via Twitter, Mastodon, or the forum.

We hope you enjoy this release!

PreviousOrbeon Forms 2021.1NextOrbeon Forms 2019.2.4

Last updated