You are viewing the documentation for Blueriq 15. Documentation for other versions is available in our documentation directory.

Identifier

Component

Issue

Solution

BQ-15778

Runtime

CVE-2022-22968

Upgraded Spring Framework to the version where this issue is fixed.

BQ-15698

Runtime

The Spring configuration in Blueriq contained a circular reference when the blueriq.session.session-manager property would be set to external.

The circular reference has been removed.

BQ-15646

Development dashboard

Selection inputs don't show any values to select anymore except for one empty value. In the case of a multivalue slection input selecting this empty entry will add an empty pill.

The selction input works as intended again.

BQ-15369

Runtime

When a log level on root is set higher than INFO the audit logging isn't working anymore.

Audit logging will always work regardless of log level on root, when activated in bootstrap.properties

BQ-15359

Runtime

The AQ_GetHeaders service did not support multi valued headers. It would store the first value of a multi valued header, regardless of whether is was stored to a single valued or multi valued attribute.

We added support for multi valued headers to the AQ_GetHeaders. When a multi valued header is stored to a single valued attribute, the last value will be stored.

CSD-4063

Development dashboard

When opening the h2 console an error screen is shown instead of the h2 console

The IIS proxy in the installer sets a header which is not properly understood by tomcat serving the h2 console, resulting in the error. By setting extra headers in IIS, tomcat can properly understand the request and serve the h2 console.

CSD-3889

Runtime

Blueriq didn't offer a security property to enable session fixation protection

Blueriq now offers a property to enable session fixation protection: blueriq.security.session-fixation-protection.enabled = true

  • No labels