ONLYOFFICE Docs Developer Edition Versioni

Scopri le novità in ogni release, con dettagli su funzionalità, miglioramenti e problemi risolti.

gen
feb
mar
apr
mag
giu
lug
ago
set
ott
nov
dic
ONLYOFFICE Docs v10.0.0Versione principale12 ott 2026
Funzionalità
  • All Editors:
    • Added support for the Data Table chart element with the ability to add and configure text and graphic parameters.
    • Updated the plugin marketplace design: added a left panel for switching categories.
    • Added conversion of SVG images to shapes.
    • Added the Download button to the top toolbar.
  • Document Editor:
    • Added the horizontal line settings window.
    • Implemented clipping of text by lines in a paragraph with exact line spacing.
    • Added support for the keepNext parameter for tables, as well as for paragraphs and tables inside block content controls.
    • Improved support for graphic equations and other inline objects in right-to-left (RTL) text.
    • Implemented a table row option that prevents a row from breaking across pages.
    • Added items for continuing a list or restarting numbering to the Paste Special menu.
    • Implemented the ability to go to another user's cursor and follow it during co-editing.
  • Spreadsheet Editor:
    • Added range highlighting in the formula bar.
    • Added saving to the XLS format.
    • Sped up some operations by storing styles and data separately.
    • Implemented creating charts from non-adjacent data.
    • Added an option to enable and disable AutoComplete for cell values.
    • Added tooltips for constants in function arguments (the AGGREGATE function).
    • Added an animated selection border after copying or cutting.
    • Implemented support for sheet background when opening and saving files.
    • Improved performance of array formulas that reference entire columns or rows (ROW, COLUMN, SEQUENCE, SUM, SUMPRODUCT, etc.): calculations are faster and use less memory.
    • Extended the capabilities for working with hidden rows and columns, including unhiding hidden edge rows and columns via the context menu.
  • Presentation Editor:
    • Extended print settings: added modes for printing notes, handouts, and outline, as well as printing hidden slides, slide background and frame, comments, slide numbers on handouts, and fitting to the page size.
    • Added view modes: Outline, Notes, Handout Master, and Notes Master.
    • Added the Reading View mode.
    • Added the Animated and Video buttons to the File menu for exporting a presentation with a choice of slide range, resolution, slide duration, and format.
    • Set a separate default duration for each transition type.
  • Forms:
    • Added the ability to save a signature in signature fields and reuse it from the list of saved signatures.
    • Added an option to enable and disable spell checking when filling out a specific form.
  • PDF Editor:
    • Implemented removal of annotations in the Redact area.
    • Added the ability to remove metadata from a document using the Redact feature.
    • Added the annotation settings panel.
    • Added the ability to insert a signature into a document via the Comment tab.
    • The Comments panel now displays all annotations indicating their type.
    • Added the ability to edit PDF form actions via Advanced Settings in the form settings panel.
    • Implemented creating and filling out forms by roles, as well as collecting data from filled-out forms.
    • Added recognition of tables with visible borders in the Edit Text mode.
    • Added the signature field to the Forms tab in the Edit PDF mode.
    • Added field visibility options to the right form settings panel.
  • Convert:
    • Added support for the OFD format: files can be opened for viewing and converted to other formats in the same way as XPS.
  • Back-end:
    • Updated the design of the server welcome page.
    • Added conversion endpoints with direct file upload (multipart): POST /converter/from-file and POST /docbuilder/from-file.
    • Forms saved as a regular PDF are signed on submission (Submit).
    • JWT is enabled by default in default.json.
    • Removed the separate changes2forgotten script: changes are restored to forgotten when the server shuts down.
    • Added the services.CoAuthoring.server.docbuilderEnable and services.CoAuthoring.server.convertServiceEnable parameters for disabling the public Document Builder and converter APIs (true by default).
    • Added the coauth.connections metric with the mode (edit, liveview, view) and replica tags.
    • Added integrity verification of downloaded files when the integrator provides the corresponding headers: the services.CoAuthoring.requestDefaults.checksumVerification parameter (true by default).
    • Behavior change: /converter, /docbuilder, and /command no longer accept a token from the editor configuration. Added the operation field to the token, which is optional for these requests and required for /converter/from-file and /docbuilder/from-file.
    • Behavior change: ipfilter rules are now required for WOPI; the allow: * rule is not enough, the host must be specified explicitly.
    • Behavior change: only the log4js logging level can be changed via runtime.json.
  • Customization:
    • Added the editorConfig.customization.ai.disabled parameter for disabling AI Tools.
    • Removed handling of the deprecated editorConfig.customization parameters: reviewDisplay, trackChanges, and showReviewChanges.
  • Mobile:
    • Implemented saving a copy of a file (Save a copy), including via WOPI.
  • API:
    • Simplified calling editor methods from plugins: added the global Editor object whose methods return a Promise.
    • Added the Editor.RunMacro method for executing editor API code with passing arguments and getting the result via await.
    • Added the ApiShadow class for working with shadows.
    • Added methods for configuring line arrows.
    • Added methods for configuring the text of chart data labels.
    • Added the ApiTextRange class to the Presentation, Spreadsheet, and PDF editors.
    • Added methods for working with watermarks in the Document Editor.
    • Added the ApiWatermarkSettings class and methods.
    • Added classes for working with tables of contents and tables of figures in the Document Editor.
    • Added methods for working with tables in the Document Editor.
    • Added the ApiDropCap class for working with drop caps in the Document Editor.
    • Added support for regular expression search in the ApiDocument.Search method.
    • Added a method for selecting the current sentence in the Document Editor.
    • Added the ability to set a style by name and to remove a style or numbering using the null value in the SetStyle (ApiParagraph, ApiParaPr, ApiRun, ApiTextPr), ApiParagraph.SetNumbering, and ApiParaPr.SetNumPr methods.
    • Added the comparisonPr parameter to the Api.CompareDocuments and Api.MergeDocuments methods for configuring document comparison and merging, including the types of changes to track and the change author.
    • Added the ApiHyperlink class and methods for working with hyperlinks in the Spreadsheet Editor.
    • Added the ApiPageSetup, ApiPage, and ApiHeaderFooter classes for working with page settings and headers/footers in the Spreadsheet Editor.
    • Added support for wildcards and regular expressions in ApiRange.Find and ApiRange.Replace.
    • Added support for 2 to 30 ranges in Api.Intersect.
    • The ApiRange.SetValue method now shifts relative references in a formula for a multi-cell range and returns false if the value is not written.
    • The ApiRange.GetFormula method now returns an array of formulas for multiple cells.
    • Added new methods in the Spreadsheet Editor.
    • Added methods for working with the StopIfTrue property of conditional formatting rules.
    • Added methods for grouping and ungrouping objects in the Spreadsheet Editor.
    • Removed the Spreadsheet Editor's own ApiColor class; the common ApiColor class is used instead. The ApiColor.GetRGB method now returns an {r, g, b} object instead of a number.
    • Added methods for working with presentations.
    • Added methods for traversing the presentation structure.
    • Added methods for working with tables in the Presentation Editor.
    • Added plugin methods for the Presentation Editor.
    • Added the SearchNext plugin method for the PDF Editor.
    • Added a method for getting the selection on a PDF page.
    • Added the ApiSignatureField class and methods for working with signature fields in the PDF API.
    • Added the ApiActionCollection class for getting, adding, replacing, and removing PDF form widget actions.
    • Added PDF form action classes and methods.
Correzioni
  • Security:
    • Fixed XSS vulnerability in hyperlinks in DOCX documents.
    • Fixed CVE-2022-3602 and CVE-2022-3786 vulnerabilities in OpenSSL in the Docker image.
    • Fixed CVE-2022-23308 vulnerability during document conversion.
    • Fixed macro sandbox bypass.
    • Fixed incorrect memory write when converting XLS to XLSX.
    • Fixed XSS vulnerability in the Name field when creating an AI assistant.
    • Fixed authorization bypass when printing PDF.
    • Fixed converter crash when processing circular style inheritance chains in DOCX.
    • Fixed stack buffer overflow when reading OLE data during conversion of legacy format documents.
    • Fixed heap buffer overflow when rendering image masks in PDF.
    • Fixed macro sandbox bypass with access to cookies.
    • Fixed access to OS files via the native.GetFileBinary method of the Document Builder API.
    • Fixed the possibility of using an editor token to access Document Builder.
    • Fixed out-of-bounds read when converting DOC to DOCX.
    • Fixed out-of-bounds read when processing PPT metafiles, which led to memory disclosure in the resulting PPTX.
    • Fixed out-of-bounds read when parsing character formatting in DOC files.
    • Fixed out-of-bounds read when parsing the piece table in DOC files.
    • Fixed execution of embedded JavaScript in PDF documents.
    • Fixed SSRF vulnerability in WOPI endpoints.
    • Fixed double free when converting some DOCX files.
    • Fixed out-of-bounds read when parsing the font table in DOC files.
    • Fixed heap out-of-bounds write caused by integer overflow during document conversion.
    • Fixed XSS vulnerability in the function arguments window in the Spreadsheet Editor.
    • Fixed execution of malicious JavaScript added to PDF file actions.
    • Fixed path traversal vulnerability when processing HML files.
    • Fixed arbitrary file write when extracting archives during conversion.
    • Fixed local file read during EPUB conversion.
    • Fixed the possibility of creating the runtime.json file via a Document Builder request.
    • Fixed XSS vulnerability in the Document Editor via a font or style name in the Review panel.
    • Fixed reflected XSS vulnerability on the /baseurl page.
    • Fixed issuing a token for an anonymous WOPI convert-and-edit request that was accepted by the Document Builder API.
    • Fixed out-of-bounds read when converting XLS to XLSX.
    • Fixed the possibility of specifying an arbitrary file system path in logging settings via runtime.json.
    • Fixed co-editing session hijacking when working via WOPI.
    • Fixed path traversal vulnerability in the template handler for creating new files via WOPI, which led to server configuration disclosure.
    • Fixed vulnerabilities in the DocumentServer Docker image.
    • Fixed stack buffer overflow when processing fonts in XPS files.
    • Fixed XSS vulnerability in the HTML plugin when pasting into a document.
    • Fixed authentication of tenants without a configured secret in multitenant mode.
    • Fixed out-of-bounds read when processing EMF+ bitmaps, which led to memory disclosure.
    • Fixed out-of-bounds read when processing hyperlinks in XLS, which led to memory disclosure.
    • Fixed out-of-bounds read when rendering WMF, which led to memory disclosure in the resulting document.
    • Fixed privilege escalation via the documentserver-flush-cache script.
ONLYOFFICE Docs v9.4.0Versione principale18 mag 2026
Funzionalità
  • All Editors:
    • Added Croatian language interface translation (hr-HR, Hrvatska).
    • Moved chart settings from the right panel to a separate Chart design tab.
  • Document Editor:
    • Implemented the ability to add a horizontal line.
  • Spreadsheet Editor:
    • Added the Dark mode support for the sheet.
  • Presentation Editor:
    • Added 25 new presentation design themes.
    • Added 20 new slide transitions, grouped by category.
  • Forms:
    • Built-in recipient assignment and filling status: Managing form recipients used to require extra steps outside the immediate editing environment. Now, you can assign specific recipients and track the filling status directly within the editors. This centralized approach makes assigning roles and tracking form completion far more intuitive.
    • Implemented saving the signature image to localStorage. Now when filling in the signature field, the last selected image is used by default.
    • Added the "Send for signing" and "Filling status" panels.
  • Back-end:
    • Removed the limitation of 20 simultaneously opened documents.
    • Removed code minification to simplify support and improve readability.
    • Consolidated components into a single process to optimize resource consumption and simplify working with the application.
    • Removed dependency on RabbitMQ due to component consolidation.
    • Removed dependency on databases due to component consolidation.
  • Customization:
    • Added the disable parameter to the plugins section of the editors configuration - an array of plugin IDs that are blocked on load and hidden in the interface.
  • Mobile:
    • Added the ability to disable auto-save and manage saving in manual mode.
  • API:
    • Added new plugin methods for moving the cursor inside or outside a field.
    • Extended GroupActions options for controlling scrolling and cursor position.
    • Added a new class for the signature form.
    • Added methods for filling and retrieving form data.
    • Added a method for creating a form.
    • Added a new method to check whether the form has been filled in.
    • Added a method for retrieving the highlight color of forms without a role.
    • Added a method for retrieving the highlight color of a form.
    • Added methods for managing the color of content controls.
    • Added new methods for the ApiWorksheet class.
    • Added new class ApiListObject and methods.
    • Added new class ApiListColumn and methods.
    • Added new class ApiListRow and methods.
    • Added new class ApiSort and methods.
    • Added new class ApiSortFields and methods.
    • Added new class ApiSortField and methods.
    • Added missing methods for getting paragraph settings.
    • Improved behavior of several Get methods on the ApiTextPr object when it belongs to a style or default formatting parameters rather than a paragraph.
    • Added methods for working with text form format and the list of allowed characters.
    • Added new methods:
      • Api.GetDefNames
      • ApiRange.FillDown
      • ApiRange.FillUp
      • ApiRange.FillRight
      • ApiRange.FillLeft
      • ApiRange.SetFormula
    • Added methods for managing cell size.
    • Added the GoToPage plugin method for navigating to a specific page.
Correzioni
  • Security:
    • Fixed out-of-bounds read vulnerabilities when converting XLS to XLSX in the following functions: ChartSheetSubstream::recalc, TextPropsStream::readFields, MetroBlob::ReadComplexData, SUPBOOK::serialize_book and ATTACHEDLABEL::serialize_rPr.
    • Fixed an XSS vulnerability via unsafe output in Convert-and-edit-wopi.ejs.
    • Fixed a vulnerability in GUID generation that allowed an attacker to calculate GUIDs based on their creation time.
    • Fixed a vulnerability that allowed bypassing macro sandbox restrictions and accessing environment objects via sloppy-mode this and eval.
    • Fixed a potential crash or file corruption when processing PDFs with embedded fonts.
ONLYOFFICE Docs Developer Edition v9.3.13 mar 2026
Correzioni
  • Spreadsheet Editor:
    • Fixed the issue of displaying the comment author's name when opening a spreadsheet.
  • API:
    • Fixed the ability to control the PDF editor via connector.
ONLYOFFICE Docs Developer Edition v9.3.0Versione principale24 feb 2026
Funzionalità
  • All Editors:
    • Implemented the ability to add hyperlinks to images, shapes, or groups.
    • Implemented all settings for texture fills for images.
    • Updated macro recording in documents, spreadsheets, and presentations.
  • Document Editor:
    • Added Multiple pages view.
    • Added the Zoom to 100% and Multiple pages buttons to the View tab.
    • Changed the appearance of comments. Now a user's color is used and the beginning and end of the comment are displayed.
    • Implemented the ability to select words/paragraphs by double/triple-clicking the mouse.
    • Added saving to the MD format.
    • Moved header and footer settings to a separate Header & Footer tab.
  • Spreadsheet Editor:
    • Added support for new functions: REGEXTEST, REGEXREPLACE, REGEXEXTRACT.
    • Improved work of the COUNTIF function.
    • Added support for dynamic arrays.
    • Added Solver for solving linear problems (Simplex LP).
    • Changed the color of the resolved comment indicator.
    • Added the ability to select multiple separators when splitting text into columns/pasting from the clipboard.
    • Added the Format button, which combines various functions for working with sheets/rows/columns.
    • Added support for TSV files for reading.
  • Presentation Editor:
    • Added support for GIF animations playback in the slideshow demonstration mode.
  • Forms:
    • Added the signature settings window with the ability to draw and add text to signatures.
    • Added the ability to stretch fixed forms to fit the table cell size using the context menu.
    • Added the Protection tab, which duplicates the Protect functionality in the File menu.
    • Added saving to the MD format.
  • PDF Editor:
    • Added version history.
    • Added Multiple pages view.
    • Added the Zoom to 100% and Multiple pages buttons to the View tab.
    • Implemented a password prompt when enabling the Edit PDF mode if the file is protected from editing.
    • Added support for Link annotations with the ability to add them both to an area and to text on a page.
    • Added the ability to continue editing a PDF using embedded fonts.
    • Added the ability to redact text using the auxiliary pop-up toolbar.
    • Added parameters for printing pages.
  • Back-end:
    • Added two open handlers for integrators: /meta/formats - a list of formats for conversion in the json form /meta/config - connection data (headers, addresses, file size limit).
    • Added caching to Service Worker with replacing the last three opened documents. This speeds up reopening and allows caching of large files, which the browser doesn't do.
    • Added information pages for the example and admin-panel services that are not running.
  • Customization:
    • Changed the permissions.copy parameter of the config. Copying is now prohibited not only to the external buffer, but also to the internal one. A corresponding warning is displayed when opening the editor or attempting to copy.
  • Mobile:
    • Added highlighting of active arguments when entering a formula in the Spreadsheet Editor.
  • API:
    • Added methods for working with footnotes and endnotes.
    • Added plugin methods for working with add-in fields.
    • Added a new ApiColor class for unified color handling and updated existing methods.
    • Added methods for creating ApiColor instances.
    • The following names are available for the theme color: accent1, accent2, accent3, accent4, accent5, accent6, bg1, bg2, dk1, dk2, lt1, lt2, tx1, tx2.
    • Added methods for the ApiColor class.
    • Updated methods for working with text, background, and border colors. Now they accept/return ApiColor instances.
    • Added new methods for data validation in the Spreadsheet Editor.
    • Added new ApiAutoFilter and ApiFilter classes for unified work with sheet autofilters and column filters in the Spreadsheet Editor API.
    • Added methods for creating ApiAutoFilter instances.
    • Added methods of the ApiAutoFilter class.
    • Added methods of the ApiFilter class.
    • Added a new ApiSlideShowTransition class for managing transitions between slides and supporting hyperlinks to shapes/images.
    • Added methods for creating and retrieving transitions.
    • Added methods of the ApiSlideShowTransition class for setting transition effects.
    • Added methods of the ApiSlideShowTransition class for managing speed and duration.
    • Added methods of the ApiSlideShowTransition class for managing auto-transition.
    • Added methods for creating and setting hyperlinks using the new ApiHyperlink class.
    • Added methods for retrieving information about a shape's fill and stroke.
    • Added classes and methods for working with animation.
    • Added plugin methods to check that the form is signed and to get the current Add-in field for plugins like Zotero.
    • Added methods for blocking the form from being changed (similar to the lock button in the UI).
    • The FormData object is extended with the following fields.
      • options - added for checkboxes, radio groups, drop-down lists, and combo boxes label - text label for checkboxes (if specified) format - format for date fields lang - language for date fields.
    • Changed the CreateStroke method for Apiclasses - added the sDash parameter.
    • Added new methods for the ApiDrawing class.
    • For the ApiDrawing class, changed the following methods: Select (added the isReplace parameter), SetHorPosition (added the bPercent parameter), SetVerPosition (added the bPercent parameter).
    • Added the GetDrawingsByName method for the ApiDocument, ApiWorkbook, and ApiPresentation classes.
    • Added the GetSelectedShapes, GetSelectedDrawings methods for theApiWorksheet class.
    • Added the SetPaddings method for the ApiShape class.
    • Added a method to ApiTable to correctly set table proportions.
    • Added a method to ApiChart to get the chart title.
    • Added API for macros in the PDF Editor with the ability to add, delete and edit pages, forms, annotations, autoshapes, tables, images, charts.
Correzioni
  • Security:
    • Fixed several vulnerabilities with out-of-bounds read in XLS processing/conversion (via FilePass, HLink, rgXTI.itabLast, Formula record cce, ShapePropsStream, and CRN.colLast records/fields) leading to information leak and ASLR bypass.
    • Fixed vulnerabilities with untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors) leading to information leak and ASLR bypass.
    • Fixed a DOM-based XSS vulnerability when executing a macro using dynamic import() (CVE-2021-43446, CVE-2023-50883, CVE-2024-44085).