SR-D4304 · Issue 446373
Locale object handling added to SimpleDateFormat
Resolved in Pega Version 8.3
Configuring an Authentication Service with signing certificates failed at runtime with a invalid date exception in non-English locales. This has been fixed by passing the locale object as parameter to SimpleDateFormat.
SR-D8319 · Issue 446427
Case name caption security inserted with cross-site scripting filtering
Resolved in Pega Version 8.3
In order to protect against the possibility of executing malicious JavaScript code by entering an appropriately modified name while adding new case type, pyCaption in menu items has been made HTMLSafe by converting JSON through the GSON library. An additional fix has been made to use cross-site scripting filtering to ensure the script does not execute while page is loaded. Additional handling for Firefox has also been added to normalize tabName to properly display Recents.
SR-D6947 · Issue 446500
Email AttachmentPage updated to support use of Data-WorkAttach
Resolved in Pega Version 8.3
Attachments were not getting appended in the email sent by the Agent SendCorr. This was traced to a null Page that resulted if the attachment was of type custom Data-WorkAttach, and has been resolved by modifying the condition check on the objclass of AttachmentPage to change it from equalsIgnoreCase(Data-WorkAttach-File to startsWith(Data-Work-Attach-) .
SR-D4464 · Issue 456291
Deprecated RowRepeat control replaced with table/grid
Resolved in Pega Version 8.3
After upgrade, opening the parameters popup for a Data Page's source did not display the parameter input fields and instead showed what appeared to be encoded values for the properties those fields referenced. This was traced to row repeat not being properly rendered due to the stream generation being interrupted. Row repeat is a deprecated control, and even though an old section with that control may still be used in pages imported to more recent versions of Pega, issues may arise from time to time when trying to mesh deprecated controls with the newer technology. In order to ensure greater compatibility going forward, the row repeat control has been replaced with table/grid.
SR-D3947 · Issue 456344
cross-site scripting security added to GET Request Work-DeleteAttachment activity
Resolved in Pega Version 8.3
Security has been improved against a potential cross-site scripting vulnerablity on GET Request Work-DeleteAttachment Activity.
SR-D5388 · Issue 456426
Corrected dropdown focus issue with dynamic layouts
Resolved in Pega Version 8.3
The focus was not retained on the dropdown field whose property was used in the dynamic layout for the refresh condition. Investigation showed that in pzpega_ui_doc_focus.js, the function "focusNextElement" was setting pega.u.d.gFocusElement set to null after the first load. This has been corrected.
SR-D6555 · Issue 457242
Access When check added for pyStartCase privilege
Resolved in Pega Version 8.3
If a privilege was defined in the pyStartCase flow rule and the access role to object assigned a privilege based on 'Access When' (not production level), the user was not able to start a case. This was traced to the havePrivileges RUF passing an incorrect primary page to evaluate the privileges in combination with the 'access when'. To resolve this, the engine API will call tools.getAuthorizationHandle().havePrivilege for each privilege until it finds a match.
SR-D3257 · Issue 457250
Database connection retry logic to class loader
Resolved in Pega Version 8.3
In order to create a more robust environment in case of connectivity issues, an enhancement has been made to add retry logic to database connections in the class loader.
SR-D8467 · Issue 461268
Resolved false alarm exception for Cloud BIX extraction
Resolved in Pega Version 8.3
BIX Extraction on Cloud was intermittently throwing an exception even though the BIX Extraction was successful. This false alarm was triggered by inconsistencies in an API within the BIX extraction module used to determine if files existed on a Cloud S3 location post-extraction, and has been resolved by removing the file check.
SR-D9132 · Issue 461282
Performance improvements for EventStoreWriter class
Resolved in Pega Version 8.3
The cache protocol has been modified In order to improve performance for the EventStoreWriter class.