Added
5.24.39 2025-01-16
- SECURITY the default authentication page
ub-auth.html
now contains a rule to avoid being indexed by Google
5.24.38 2025-01-14
- added masking of viewport during re-logon to prevent user interaction with UI while waiting for authentication response
Removed
5.24.37 2025-01-09
URichTextEditor
: remove template
plugin and its button from the toolbar since there are no passed
templates by default to make it work. It can be added with the help of buildTinyMceConfig
prop method alongside needed templates
Fixed
5.24.39 2025-01-16
UTableEntity
: deleting of item that loses access after update
5.24.38 2025-01-14
UTableEntity
: consider where items marked as non-clearable while selecting an item by ID on local data changes.
It fixes passing of required where items for some misc options like __useRelatedEntityRls
in Scriptum.
Also, prevents failing if some item loses access after update
PDFViewerExt_InsideIframe
: added min-height of 200px for summary content section
5.24.37 2025-01-09
URichTextEditor
: fixed preview
feature (actual fix is in adminui-reg
CSP rules)
- removed the
viewsource
button from the toolbar since it does not exist
5.24.36 2025-01-07
UTableEntity
: introduced a check to ensure that condition is not equal to 'custom' before adding the expression to
fieldList in updateDataFieldList
getter.
- Locale key
select.valueIsUndefined
: removed entity name from message
Added
5.24.112 2025-01-14
- added masking of viewport during re-logon to prevent user interaction with UI while waiting for authentication response
Fixed
5.24.113 2025-01-16
- EntityGridPanel multifilter: the element label is now taken from the label of the corresponding grid column (if the column is available), rather than from the attribute label
Added
5.24.42 2025-01-16
- SECURITY main application page now contains a rule (header
X-Robots-Tag: noindex, nofollow
) to avoid being indexed by Google.
Rule can be removed by sets ubConfig.application.customSettings.visibleForSearchEngines
to true
5.24.40 2025-01-09
frame-scr
CSP rule now includes data:
- used by tinymce preview
Changed
5.24.42 2025-01-16
- SECURITY removed
X-XSS-Protection
header from main application page (deprecated by browsers, unsafe)
Added
5.24.10 2025-01-09
- export
formatCurrency
- a currencies formatting for UK
// before this changes (wring way)
const formatCurrency = require('@unitybase/cs-shared/formatCurrency')
// after this changes - right way
const { formatCurrency } = require('@unitybase/cs-shared')
Fixed
1.0.3 2025-01-09
- Added missing locales for 'Date/time' key
Changed
5.24.23 2025-01-09
- SECURITY user anonymizing now uses SHA256 of userID salted with host instead of MD5 of username
Fixed
5.24.24 2025-01-14
- prevent error
Cannot read properties of null (reading 'setupCert2KeyWatchdog')
in case user,
what previously logged into the system with a hardware token has logged in using cloud cryptography
- added validation what the user login match the initial one when re-entering.
Logins may differ if the user chooses a different key during CERT2 re-authentication
Added
5.25.49 2025-01-16
- added documentation for
ubConfig.application.customSettings.visibleForSearchEngines
prop
Fixed
5.24.31 2025-01-09
- Added
uba_advSecurity
read permission for Supervisor
Changed
5.25.55 2025-01-16
- SECURITY improvements in generated nginx config for HTTPS:
- removed support for TLS1.1 (remains TLS1.2 and TLS1.3)
- use a modern ssl_ciphers set (removed week ciphers: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA)
- added support for DHE/EDH and Forward Secrecy
- (Linux) added generation of DH params file if not exists; on Windows should be generated manually
Removed
5.25.55 2025-01-16
ubcli linkStatic
: removed -run
cmd line switch (never worked)
Fixed
5.24.36 2025-01-14
ubm_sysdictionary
form: fixed custom JSON validation to correctly handle objects as values,
preventing an invalidJson
error