{"id":2879,"date":"2022-12-05T08:39:10","date_gmt":"2022-12-05T08:39:10","guid":{"rendered":"https:\/\/sdf-docs.clevr.com\/?docs=release-notes\/application-code-review-acr\/3-3-december-6th-2022"},"modified":"2023-10-11T07:55:07","modified_gmt":"2023-10-11T07:55:07","slug":"3-3-december-6th-2022","status":"publish","type":"docs","link":"https:\/\/sdf-docs.clevr.com\/?docs=release-notes\/application-code-review-acr\/3-3-december-6th-2022","title":{"rendered":"3.3 (December 6th, 2022)"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">New features<\/h2>\n\n\n\n<ul class=\"wp-block-list\" id=\"block-4a0d4a2e-f851-489d-bf18-cd9fcaa531da\"><li>A new security rule has been added to check for REST and web service microflow actions using a template. Templates build up a string and if parameters are used this is a possibility for injection attacks. If the parameters are properly validated you can use an annotation to prevent the violation.<\/li><li>A new security rule has been added to check strict page URL checking is turned on in the project security settings.<\/li><li>A new API call has been added to the Code Review published API. With this call you can sync branches and revisions.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Improvements<\/h2>\n\n\n\n<ul class=\"wp-block-list\" id=\"block-4a0d4a2e-f851-489d-bf18-cd9fcaa531da\"><li>The rule &#8216;Access rules in multi tenant apps should lead to current user&#8217; has been extended to support some more complex XPaths:<ul><li>OR-operation was not allowed and is now requiring left AND right to fullfill the specified XPaths.<\/li><li>Removing spaces before matching, so match doesn&#8217;t fail on developers adding spaces<\/li><li>The access rule number is shown in the message to better understand which access rule is violating<\/li><\/ul><\/li><li>Changes to an AppStore widget (new or changed) are now automatically scanned. <ul><li>They are scanned within the same widget if a widget with the same name was found in an earlier release<\/li><\/ul><ul><li>They are not scanned if a widget with the same name in an earlier release was cleared from AppStore link<\/li><li>The UI for widgets has an improved display of linked app store content<\/li><\/ul><\/li><li>AppStore module compare doing full scans on newly found modules. No longer linkes to the latest version<ul><li>For changed modules (compared to the previous revision that is reviewed) also a full scan is done to detect if a newer module from the app store was imported<\/li><\/ul><ul><li>The UI for modules has an improved display of linked app store content<\/li><\/ul><\/li><li>Small UI change. Revisions overview change [Only team server models] into [Only team server revisions]<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Fixes<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Bug fix CI\/CD mail replacement failed in very specific situation<\/li><li>Fix for rule declared variables should be used in expressions in show page actions<\/li><li>Fixing and protecting against empty pipeline guids<\/li><\/ul>\n","protected":false},"featured_media":0,"parent":522,"menu_order":3,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-2879","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/2879"}],"collection":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2879"}],"version-history":[{"count":2,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/2879\/revisions"}],"predecessor-version":[{"id":2882,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/2879\/revisions\/2882"}],"up":[{"embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/522"}],"next":[{"title":"3.2.1 and later","link":"https:\/\/sdf-docs.clevr.com\/?docs=release-notes\/application-code-review-acr\/3-2-1-and-later","href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/2845"}],"prev":[{"title":"3.3.1 and later","link":"https:\/\/sdf-docs.clevr.com\/?docs=release-notes\/application-code-review-acr\/3-3-1-and-later","href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/2885"}],"wp:attachment":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2879"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdoc_tag&post=2879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}