INC-201739 · Issue 694504
Switch from Pega base64 utility to java.util.Base64.getEncoder
Resolved in Pega Version 8.5.6
An on-premises Web Application Firewall (WAF) was interpreting the characters "%0a" in the Pega auto-generated URL as an "HTTP Response Splitting" attack. As a result communications were intercepted and a 403-error screen was shown. In addition, the characters %250A were interpreted as LF (line feed) or \n in the refreshFor hash generation. To resolve this, an update has been made to use java.util.Base64.getEncoder().encodeToString instead of the Pega base64 utility.
INC-205269 · Issue 703387
Updated key even handling for lazyDeferLoad
Resolved in Pega Version 8.5.6
Upon rendering, the timeline was very responsive for few seconds. After scrolling or sliding the timeline, it slowed and the top and bottom events were not aligning properly. In addition, pressing enter on the expandable section with the timeline control did not render any events. This was traced to pzpega_ui_doc_lazyDeferLoad having a click handler which would successfully load the data but missing an event handler for the enter key to load the timeline data on expand. This has been resolved by adding an enter event for defer load container to allow the expand and collapse of container header.
INC-205517 · Issue 705993
Corrected clearing filters in mashup
Resolved in Pega Version 8.5.6
After clearing filter on a table, the screen did not reload and is hidden in Iframe in Mashup. This has been resolved by adding code to trigger the resizeHarness action for clear filters in a mashup configuration.
INC-206483 · Issue 707093
Delegated rules page displays proper warning in Vietnamese
Resolved in Pega Version 8.5.6
Opening the "Configuration" left navigation item for delegated rules and clicking on edit to modify the rule did not display the guardrail warning message properly in Vietnamese. This has been resolved by ensuring the Vietnamese date time is properly formatted as "Ngày dd tháng M năm yyyy".
INC-206488 · Issue 698400
DOM Purifier updated to allow new tags
Resolved in Pega Version 8.5.6
Snippets were visible after being added and published, but after editing the same content ID it was converted to a text file. This was traced to the DOM Purifier plugin removing tags which were not in default list, and has been resolved by adding the ADD_TAGS option in the DOM purifier to accept tags.
INC-207631 · Issue 701549
Decision Table property chooser made accessible
Resolved in Pega Version 8.5.6
The content of the pop-up "Decision Table property chooser" was not accessible by keyboard navigation. This has been resolved by adding the necessary code for focus inside the iframe.
INC-208499 · Issue 702516
Corrected Ajax container scrollbar with tabs
Resolved in Pega Version 8.5.6
The scroll bar was not working as expected for a pyCaseWorker Section configured with an Ajax container and "Show as tabs". This has been resolved by overriding the div[data-mdc-recordid] with overflow-x: auto style to get the proper horizontal scroll in the Ajax container.
INC-208848 · Issue 703875
Cosmos landing page configuration icon updated
Resolved in Pega Version 8.5.6
In order to allow changing the Cosmos landing page configuration icon, the harness has been made available. The default icon has also been updated.
INC-209071 · Issue 706041
Other Currency resolves value in Pega DX
Resolved in Pega Version 8.5.6
When using Pega DX with the pxDisplayText currency set to "Other currency", only the property name was sent as part of the metadata and not the actual value. This has been resolved by updating "Other currency" to resolve the property reference and get the value.
INC-210760 · Issue 708530
Corrected malformed URL
Resolved in Pega Version 8.5.6
The function used in the session timer to log off the user was not working consistently, and attempting to discard a checked-out delegated Rule did discard the rule. Both issues reported the error "HTTP Status 400 - Bad request". This was traced to a badly formed URL, and has been resolved by wrapping the URL with SafeURL_createFromURL.