Overview

  • AdoptOpenJDK 11 bundled with installed i-net Designer and Report Server was updated to version 11.0.10
  • Support for Internet Explorer will be discontinued in the next version 21.4
  • Support for Java 8 will be discontinued in the next version 21.4. At least Java 11 will be required
  • Factur-X / ZUGFeRD plugin added
  • JDK 15 now supported
  • Tiff images supported
  • Java version 14 supported
  • Web API added for Datasource, Backup/Restore in maintenance
  • Web API core plugin added. It provides a GUI for that a permission is necessary
  • Translations plugin added. With this plugin it is possible to translate labels and messages of the GUI in an additional language
  • The minimum supported Windows version is Windows 8 or Windows Server 2012
  • The plugin reporting (file reporting.zip) added. It is required because it contains the base product
  • The XMLRPC plugin has been deprecated in favour of the new WebAPI plugin using a RESTful JSON interface
  • macOS: Recovery Manager started with an error "Protocol family unavailable"
  • Private Cloud License added

Security

  • Security Fix: Open Redirect Vulnerability occurred (CVE-2020-28150)
  • Security Fix: Jetty CVE-2020-27216
    • In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability
  • Possible JavaScript injections prevented
  • Security Fix for CVE-2020-13692
    • PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE
  • Fixed XXE vulnerability for authenticated users with privileges to ad-hoc reporting or remote designer (CVE-2020-12684)
  • Fixed multiple XSS vulnerabilities (login was not required).
  • Fixed a path traversal vulnerability which allowed access to files within the installation folder and its sub-folders
  • The formula functions BytesFromFile and TextFromFile now limits access to files to prevent a path traversal for normal users. The file must be from a valid report location, and if it comes it from the file system then it must be from the same directory or subdirectory as the report itself

i-net Clear Reports report server

New Features / Improvements

  • Performance improved when embedding large font files
  • Date formats with regional settings (e.g. en-UK) supported in prompt dialog

date formats with regional settings (e.b. en-UK)

  • Improved compatibility for old save states with dataviews
  • New notifications are now directly shown in the web client when the OS notifications are disabled or not possible
  • SameSite=Lax Attribute set for login cookies
  • Changes of heap memory, language, country and VM arguments will work with a server restart from the web interface. Before a service restart was required
  • Web applications can now be installed as Progressive Web App (PWA)
  • Note added to configuration property "Restrict Permissions" in dialog "User & Groups" because when global permissions are not restricted then all users have administrative access!
  • Diagnostics now show cache memory usage
  • Maintenance: It is now possible to restore backups that were not made with the current version. The backup is checked for whether it is compatible with the current version, and if so, it is able to be restored
  • Changed AdHoc default render format in the WebGUI to PNG for a lossless result

Fixed Bugs

  • Exception "java.lang.IllegalStateException" with message "Not valid for write: id=..." occurred
  • Error occurred with expired session: IllegalStateException: Invalid for read: id=xxx created=xxx accessed=xxx lastaccessed=xxx maxInactiveMs=xxx expiry=xxx
  • PDF export: Character replacement for embbeded fonts improved containing characters which are in code blocks which are not in the code block list of the font
  • Regression in Diagnostics occurred because of that only the first 8 entries in list was show because the pagination was broken
  • ORA-01000: maximum open cursors exceeded - occurred if Oracle JDBC driver was used
  • OutOfMemory or ReportCache errors occurred because of problems with false positive low memory detection. The log output contains the warning: "There was a low memory situation and possibly some jobs were canceled." and maybe other subsequent errors
  • It was not possible to login if a localhost URL was used in Chrome browser to open the web interface
  • Access to the repository with Login using WebDav has not worked on Windows
  • Wrong PDF signature configuration leads to a failed designer start
  • WebDav access to the report repository has not worked on Windows. No login was requested
  • Temporary errors (Extenal visible URL '...' was not validated) occurred during validation of Private Cloud License

i-net Clear Reports runtime

New Features / Improvements

  • Use the correct database row for inlined fields in crosstab labels such as the total labels
  • ToWords formula function for Hungarian language adds a space as thousands separator
  • Break algorithm improved for Text Interpretation "HTML(advanced)" to prevent breaks in text lines
  • Use getColumnLabel() instead getColumnName() for DB2 driver version 4 and later. This has an effect for a SQL command with "AS" keywords on columns
  • User defined functions can now be used in the record selection to be executed on the database. This requires all parameters of the function call to be constants or prompt fields
  • Improved cell distribution for crosstabs in ODS and XLSX format

Fixed Bugs

  • PDF export: IndexOutOfBoundsException and NullPointerException occurred with embedded OpenType font
  • Chinese content was not aligned well on right side if Justified was used
  • PDF export:
    • Chinese characters were missing because of a bug with word wrapping that was wider than the field, surrogate characters and font replacement.
  • IllegalStateException occurred with message Unknown operation: com.inet.report.renderer.doc.controller.bk@0 if:
    • subreport contains TotalPageCount and the last instance of the subreport has no rows
    • harddisk cache was used
  • XLSX / ODS export: Exception "java.lang.IllegalArgumentException with message x2 must not less than x1" occurred if the report contains a crosstab
  • XLSX / ODS export: Percentage number was incorrectly displayed (multipled by 100)
  • Rare rounding error occurred when reducing the scale of a number by more than 9 digits in a formula function
  • Patches the SQL command to query the metadata (column names) was wrong if the SQL statement contains strings which contains brackets, e.g. REPLACE(A.FIELD,';)',')'). In this case WHERE 1=0 was added after the ORDER BY clause
  • Oracle table source identifier with a package name will be always used as name of a stored procedure and never as name of a table. This makes it possible to use the same name for a package stored procedure and a table
  • Formatting was broken if alpha numeric sorting was used for a group
  • Use getColumnLabel() instead getColumnName() for DB2 JDBC driver version 4 and later. This has an effect for a SQL commands which use column alias ("AS" keywords on columns)

HTML Report Viewer

Changed Behavior

  • Prompt dialog is pre-filled with first default prompt values
  • Break algorithm improved for Text Interpretation "HTML(advanced)" to prevent breaks in text lines

Fixed Bugs

  • Print preview was empty if the "HTML Viewer Module Toolbar" plugin was enabled

i-net Designer

Fixed Bugs

  • The following errors occurred sometimes in Remote Designer when opening a report from the repository: "No repository configuration found for file: "...rpt"" and "Not authorized. Please check your permissions and restart the Designer if applicable.".
  • It was not possible to edit a 3D Chart because the properties dialog does not open
  • Wrong PDF signature configuration leads to a failed designer start
  • The error "HTTP ERROR 400 Duplicate valid session cookies" occurred with remote designer
  • Hairline box without background was not printed in the Java output (report preview)

SDK

Fixed Bugs

  • HTML Viewer Print via PDF Plugin: Error occurred: Class Not Found: com.inet.htmlviewer.printpdf.HTMLViewerPrintViaPDFPlugin

Data Source Manager

Fixed Bugs

  • "Check Connection" in datasource properties was very slow with Oracle database version 12c release 2

Authentication

New Features / Improvements

  • Login of Members of Windows group Guest is possible

Task Planner

New Features / Improvements

  • Use the client time zone (if available) to display the next execution times
  • Placeholder from some triggers was added
  • A task can be executed parallel multiple times now