Knowledge Base
Knowledge Base
  • Login
Font Size:
Ask Joget AI

Version 8.0.7

Known Issue

Dear valued Joget DX users,

We would like to bring to your attention a known issue that has been identified in Joget DX 8.0.7 onwards. The new "Sanitize Input Value?" property options that are available in Form elements such as Text Field, Text Area, and Custom HTML have been set to be enabled by default. This feature ensures that the input values undergo sanitization before storage in the database and also reverses any escaping during data retrieval to prevent double escaping, thus mitigating HTML injection vulnerabilities. In particular scenarios, challenges may arise when employing specific languages, resulting in the input value being retrieved as unreadable.

Our development team is actively exploring the underlying cause of this issue and working towards implementing a more effective solution.

Thank you for your continued trust in Joget. We appreciate your understanding and assure you that we are committed to providing you with the highest quality of service.

Bug Fixes and Improvements

All Editions

[ FIXED ]        CORE       : Correction for updated default app, script and database for installer.
[ FIXED ]        CORE       : Form Builder - Launch icon button not immediately available after app generation.
[ FIXED ]        CORE       : Fixed data too long for column 'description'
[ FIXED ]        CORE       : Correction for fixed uploaded file will have uuid/ prepended to filename.
[ FIXED ]        CORE       : Setup - Default apps form data tables are created with wrong collation in MariaDB if the collation is not `utf8mb4_unicode_ci`.
[ FIXED ]        FORM       : File Upload -Fixed uploaded file will have uuid/ prepended to filename.
[ FIXED ]        CORE       : Process Builder - Able to save without adding any activity and caused NPE.
[ FIXED ]        CORE       : Console - Correction of Console - "+" sign in search value is wrongly encoded.
[ FIXED ]        CORE       : List Builder - Can't add row action to Simple List and Column Data template.
[ FIXED ]        CORE       : Process Builder - Can't clone generated approval process.
[ FIXED ]        CORE       : Process - Process generated using app generator does not enforce process start whitelist to admin.
[ FIXED ]        CORE       : Console - "+" sign in search value is wrongly encoded.
[ FIXED ]        CORE       : Settings - Switch `Process Completion Data Handling` to `Archive Process On Completion` does not migrate the old process data.
[ FIXED ]        CORE       : Process - Correction of after import app, process start whitelist did not follow the original mapping and forced to admin.
[ MODIFIED ]     CORE       : Updated default app, script and database for installer.
[ FIXED ]        CORE       : UI Builder - Copy and paste not working.
[ FIXED ]        CORE       : List - Fixed XSS.
[ FIXED ]        UI         : DX 8 Theme - Popup Dialog is not removed from page after reload.
[ MODIFIED ]     CORE       : Update getActiveServerList method for license implementation changes.
[ FIXED ]        CORE       : Audit Trail - Correction of add audit trail to track user modify setting value.
[ FIXED ]        UI         : DX 8 Themes - Error alerted when closing a popup dialog without provide an URL to redirect.
[ FIXED ]        CORE       : App Center - Reduce unnecessary API call to retrieve messages.
[ FIXED ]        CORE       : Property Editor - Regression of activity map to new form not listed after create. 
[ FIXED ]        CORE       : Security - Missing files from update TinyMCE to 6.7.2 for CVE-2023-45818 commit.
[ FIXED ]        UI         : DX 8 Themes - Fixed when the category menu label is too long, the menu count badge flows to the second line.
[ FIXED ]        CORE       : Audit Trail - Regression of add audit trail to track user modify setting value. Cluster licensing checking are fill up the audit trail.
[ FIXED ]        CORE       : spreadsheet - Fixed scrollbar randomly appears when zooming in spreadsheet.
[ FIXED ]        CORE       : Security - Update TinyMCE to 6.7.2 for CVE-2023-45818.
[ FIXED ]        CORE       : Setup - System imported apps are audited as anonymous.
[ MODIFIED ]     CORE       : Settings - Add audit trail to track user modify setting value.
[ FIXED ]        CORE       : Settings - Should not save CSRF token as setting.
[ FIXED ]        CORE       : Inbox - Show default form for deleted app assignment.
[ FIXED ]        CORE       : Code Quality - Prevent possible NPE.
[ FIXED ]        CORE       : Code Quality - Remove condition always true.
[ FIXED ]        CORE       : DX 8 Themes - Long table in a section without label can't break correctly when print.
[ FIXED ]        CORE       : Setup - Fixed large column data type for all databases setup script.
[ FIXED ]        FORM       : Form Data List Binder - Inbox optimization not working when extra filter condition with `OR` operator are used.
[ FIXED ]        CORE       : Progressive/Universal Theme - Card action is not working.
[ FIXED ]        CORE       : List Builder - Not able to delete action from  template row action placeholder.
[ FIXED ]        LIST       : List - Dynamically added row action is not handled correctly when using template.
[ FIXED ]        CORE       : FormPdfUtil - Resolve styling inheritance issue for child elements.
[ FIXED ]        UI         : DX 8 Color Admin Theme - Minify stylesheet and add option to use local fonts to replace Google fonts.
[ FIXED ]        CORE       : UI Builder - All new created UI in same app shared same page components.
[ FIXED ]        CORE       : Builders - Copy and paste text to properties panel input to replace original text resulted prepending the text.
[ FIXED ]        CORE       : Process Builder - Changing mapping of new cloned process is reflected back to original process.
[ FIXED ]        CORE       : Process Builder - Default the process start whitelist to admin when create new process or clone a process with whitelist set to everyone.
[ FIXED ]        CORE       : Process Builder - After import app, process start whitelist did not follow the original mapping and forced to admin.
[ FIXED ]        UI         : DX 8 Themes - Page having 2 breadcrumbs when in offline mode.
[ FIXED ]        UI         : DX 8 Themes - Can't click on new record button in CRUD page when in offline mode.
[ FIXED ]        CORE       : Naming Converntion Health Check - Prevent parsing of non-JSON strings into JSON objects.
[ FIXED ]        LIST       : List Builder - List sometime become empty after click save directly at list settings page. 
[ MODIFIED ]     CORE       : User - Allowed plus char (+) in username.
[ FIXED ]        UI         : Non DX 8 Themes - Missing style for App Icon and Column Data List Template.
[ FIXED ]        CORE       : Date Picker - Correction of Date Picker not working for Thai locale due to Jquery UI update. Only th_TH need to use BE calendar.
[ FIXED ]        CORE       : Date Picker - Not working for Thai locale due to Jquery UI update.
[ FIXED ]        UI         : DX 8 Themes - The count in theme inbox alert is not update after started process or completed assignment.
[ FIXED ]        UI         : DX 8 Themes - View unauthorized list only shown empty space without error message.
[ FIXED ]        CORE       : Process Builder - Activity map to new form not listed after create.
[ FIXED ]        CORE       : Admin Bar - Correction of Admin Bar - Should not hide app menu when an app set as default UI.
[ FIXED ]        CORE       : Nonce - Correction of There is no method to clear nonces for submitted page.
[ FIXED ]        CORE       : Update Spring Security to 5.7.11 for CVE-2023-34042.
[ FIXED ]        CORE       : Naming Convention Health Check - Prevent parsing empty string to JSON object.
[ FIXED ]        CORE       : Email Usage Health Check - Prevent NPE.
[ FIXED ]        LIST       : List Inbox - Regression of support inbox optimization. Records using process id as id fail to load.[ FIXED ]        CORE       : Code Quality - "toString" should not be called on array instances.
[ FIXED ]        UI         : Missing lang attribute for html tag.
[ FIXED ]        CORE       : Code Quality - Prevent possible NPE.
[ FIXED ]        CORE       : ID Generator Field - Wrong regex used to validate app variable name.
[ FIXED ]        CORE       : Update org.json:json library to 20231013 for CVE-2023-5072.
[ MODIFIED ]     CORE       : Update Apache Tomcat and Apache Tomcat JDBC to 9.0.82.
[ FIXED ]        FORM       : Form - Validator decorator does not render correctly for full width field.[ FIXED ]        CORE       : Git - Fixed deleting form leads to error and error during sync app.
[ FIXED ]        CORE       : App - Tagging - Prevent possible XSS.
[ MODIFIED ]     FORM       : Text Field/Text Area/Custom HTML - Added option to support input sanitization.
[ FIXED ]        CORE       : Nonce - Correction for There is no method to clear nonces for submitted page. Form Grid render extra time and created nonce before close popup form.
[ FIXED ]        CORE       : DX 8 Theme - Home banner not working.
[ FIXED ]        CORE       : Plugin Manager - Performance issue on plugin translation handling when processing template with large data.
[ FIXED ]        CORE       : Builder - Fixed unable to delete horizontal line in column CRUD.
[ FIXED ]        CORE       : General Setting - Not allow default UI to set to empty value.
[ FIXED ]        CORE       : Admin Bar - Should not hide app menu when an app set as default UI.
[ FIXED ]        CORE       : DX 8 Themes - Fixed dark theme does not load immediately after refreshing page.
[ MODIFIED ]     CORE       : License - Support for backend licensing.
[ FIXED ]        LIST       : List Builder - Permission - Not able to delete permission rule.
[ ADDED ]        CORE       : Security Enhanced Directory Manager - Added captcha validation on forgot password page.
[ FIXED ]        CORE       : Nonce - There is no method to clear nonces for submitted page.
[ MODIFIED ]     CORE       : Task Delegation - Add indexes to table.
[ FIXED ]        LIST       : List - Filter form should be using GET method.
[ MODIFIED ]     CORE       : Add method to remove task delegation cache.
[ FIXED ]        CORE       : List Inbox - Regression of support inbox optimization. Task delegation is broken.
[ MODIFIED ]     UI         : Ajax Theme - Allow form, link and button not to override by theme event by adding "off_ajax" css class.

Professional, Enterprise & Cloud Editions

[ FIXED ]        CORE       : Correction for Updated default app, script and database for installer.
[ MODIFIED ]     CORE       : Updated default app, script and database for installer.
[ FIXED ]        LIST       : Column Data List Template - New added property causing some data rows in old created list are missing.
[ FIXED ]        LIST       : Simple List/Column Data Template - Links and checkboxes are not clickable in desktop mode when swipe action is enabled.
[ FIXED ]        CORE       : Approval/Assignment Process Generator - Process generated using app generator does not enforce process start whitelist to admin.
[ FIXED ]        CORE       : Information Tile Component - Can't display platform message.
[ MODIFIED ]     CORE       : Updated default app, script and database for installer.
[ MODIFIED ]     CORE       : Allowed adding prefix in JAVA_OPTS to load different license.
[ FIXED ]        CORE       : Chart Menu - Prevent NPE.
[ FIXED ]        FORM       : Spreadsheet - Dropdown not able to scroll in mobile.
[ FIXED ]        FORM       : Spreadsheet - Fixed Spreadsheet overflowing when zooming in.
[ MODIFIED ]     CORE       : Rich Text Field - Added option to support custom settings for customizing the toolbar.
[ FIXED ]        UI         : DX 8 Angle Theme - Minify stylesheet and add option to use local fonts to replace Google fonts.
[ FIXED ]        FORM       : Form Grid - Fixed the issue where the file download link was showing in Windows before the form grid was submitted.
[ FIXED ]        LIST       : Simple List/Column Data List Template - Swipe action does not swipe every element correctly.
[ MODIFIED ]     CORE       : License - Show correct label for unlimited users license.
[ FIXED ]        CORE       : APM - Slow trace count is not correct.
[ FIXED ]        CORE       : APM - Embedded UI data is not display.
[ FIXED ]        CORE       : Update Spring Security to 5.7.11 for CVE-2023-34042.
[ FIXED ]        UI         : Janux Theme - Page navigation of nested list is not style correctly.
[ FIXED ]        LIST       : JDBC List Binder - Regression of support inbox optimization. Records using process id as id fail to load.
[ FIXED ]        CORE       : SOAP Tool - Dynamic Invoke may using wrong service if there is same service name with different number of parameters.
[ FIXED ]        UI         : UI - Missing lang attribute for html tag.
[ FIXED ]        CORE       : Code Quality - Prevent possible NPE.
[ FIXED ]        CORE       : ID Generator Tool - Wrong regex used to validate app variable name.
[ FIXED ]        CORE       : Update org.json:json library to 20231013 for CVE-2023-5072.
[ MODIFIED ]     CORE       : Update Apache Tomcat and Apache Tomcat JDBC to 9.0.82.
[ FIXED ]        FORM       : Form - Validator decorator does not render correctly for full width field.
[ FIXED ]        CORE       : Nonce - Correction for Clear nonces for a submitted page. Clear the nonce immediately after remove request hash.
[ FIXED ]        FORM       : Form Grid - Max number of row limit does not hide the add button when edit the records again.
[ FIXED ]        CORE       : Task Delegation - Correction for Task Delegation - Remove cache during save. NPE is not handled.
[ MODIFIED ]     CORE       : License - Support for backend licensing.
[ FIXED ]        LIST       : Database Wizard List Binder - Not working in MSSQL.
[ ADDED ]        CORE       : Security Enhanced Directory Manager - Added captcha validation on forgot password page.
[ FIXED ]        CORE       : Clear nonces for a submitted page.
[ FIXED ]        FORM       : Spreadsheet - Fixed Spreadsheet autocomplete failed when typing chinese character.
[ MODIFIED ]     CORE       : Task Delegation - Remove cache during save.
[ FIXED ]        LIST       : JDBC List Binder - Regression of support inbox optimization. Task delegation is broken.
[ FIXED ]        FORM       : Spreadsheet - Dropdown does not support multi dependency fields.
[ FIXED ]        LIST       : Nested List Formatter - Paging not working in Ajax Theme.
Created by Marcos Last modified by Debanraj Ravindran on Aug 05, 2026
Tags:
Previous Version 8.0.8 NextVersion 8.0.6