CSSCurrent en:Version 7.1.0

Release Date: 27.08.2024

Important Update Notes

Language Packages

Due to structural changes in the language packages, all supported server language packages will be updated automatically, customized language packages will be removed during the update process (a backup is done before). If more language packages are needed, it is required to download and install them again.

In case your language packages have been modified, the attached delta-file Datei:Delta english lp 7.0.0 to 7.1.0.txt can help you to locate the changes in this update and re-apply the modifications. The structure of this file is explained in Language Pack Changes.

Cookie Security

Cookies will now set the SameSite flag for enhanced security. Exotic configurations without HTTPS and iFrame security disabled may encounter issues as described here.

New features

REST-API

New Version number

The version number of the Cryptshare REST API was increased to 1.10.

New REST-API feature: Revoke transfer

It is now possible to revoke a transfer via the REST API such that its files are no longer accessible by the recipients. More information about revoking a transfer can be found here.

New REST-API feature: Request filled out email templates

It is now possible to request filled out email templates via the REST API for the emails "sender notification", "recipient notification" and "recipient notification for sent folders". More information can be found here.

Extended REST-API feature: Requesting the Transfer Policy" with the file type filter configuration

It is now possible to request the configuration of the file type filter in order to determine if a file might be accepted or rejected by the file type filter. This configuration can be requested via the existing endpoint to Requesting the transfer policy.

Cookie Security: SameSite flag

In case embedding the Web App via iFrames is not allowed, Web App cookies will now set the SameSite flag. For the administration interface the setting will be always set. This enhances the security.

Please note the above-mentioned warning regarding the cookie security.

Deactivating LDAP Connection pools

A new parameter was added for the Advanced Configuration that allows the deactivation of LDAP connection pooling. This parameter is intended for debugging purposes. For productive use, a deactivated connection pooling might lead to a slower processing of LDAP requests and is therefore not recommended.

Improvements

• The third-party component for the graphical text editor has been replaced by the third-party component Quill.
• The Java runtime environment has been updated to version 17.0.12.
• The Error page that is shown when opening a non-existing page does not show the URI anymore.
• When a user requests the deletion of their personal data, it will now be immediately deleted, if no active transfers are available anymore for the requesting user.
• The schema information for the SOAP interface now contains an updated URL for further schemata, so no HTTP redirects have to be followed anymore, allowing the usage of the SOAP interface in combination of more third party libraries.

Bug Fixes

• Resolved an issue that caused partially downloaded transfer information to be displayed incorrectly in download notification emails.
• Resolved an issue that caused a warning message in the system log when sending test emails.
• Resolved an issue that caused after requesting the deletion of their personal data, in rare cases the deletion was not executed correctly by the Cleanup task.
• Resolved an issue that caused flickering in the UI when previewing large files over a slower internet connection.