dbFront v1.4.2.0693

Released: Feb 19, 2026

Atualizações na v1.4.2.0693

Recursos

  • Attachments: You can now allow "Camera Only" uploads.
  • Database: You can now allow testing Database (procedure) security on LocalHost while SSO is enabled.
  • Expression: Added the [Can See Table] security expression (formerly Row Security).
  • Expression: Added {IsGroupMember(groupname)} for use in security expressions.
  • Form: Added the option to preload the top record.
  • Layout: Added table CSS higher to allow more layout control.
  • ProcedureAPI: "OpenTable" now allows record and field selection (e.g. Attachment).
  • ProcedureAPI: "SendEmail" now allows embedded tables {%Table_1%}, {%Table_2%}.
  • ProcedureAPI: You can now add the Debug Info to dialogs even if no form or buttons.
  • ProcedureAPI: You can now allow direct BLOB/VarBinary (e.g. PDF) results. (Display/Download).
  • ProcedureAPI: Added the option limit recursion to level explicitly permitted by 'MaxRecursion', Default = 0.
  • QuickSearch: Improved search performance and index use on all join types.
  • QuickSearch: Added the option to limit the columns searched.
  • QuickSearch: Reworked logic to improve performance and results on single field joins.
  • SSO: Added optional Login Redirect URL. Often required by a LoadBalancer or Proxy.
  • SSO: Made the use of the Microsoft Graph API optional with Azure.
  • Security: You can now add/enforce integrity checks on all scripts.
  • Security: You can now enforce use of secure cookies on secure connections.
  • Security: You can now lock down embedded scripts to prevent injection attacks.
  • SystemMonitor: Added Active Sessions list to the System Monitor.
  • SystemMonitor: Added Security Scan to the System Monitor to help secure local install.
  • WebRequest: On error, you can now parse response JSON to show error detail provided by some APIs.

Correções

  • Buttons: Fixed data bound buttons visible on new records.
  • Database: Fixed incomplete AuthType dropdowns when SSO is enabled.
  • Fixed Regression from 1.4.2.0683 where joins to shared resources were reused incorrectly.
  • GridEdit: Fixed issue where dangerous user input was incorrectly handled. Not a security issue since numeric inputs can't store string values.
  • Logs: Removed errors due to anonymous public access.
  • Merged 1.4.1.1263 fixes (MySQL Dates + View Saving).
  • Messages: Cleaned up the formatting of some non-error messages.
  • MySQL: Force "ConvertZeroDateTime=True" to correct datetime conversion issues.
  • Navigation: Fixed issue where the full bookmarked record would not load after refresh.
  • ProcedureAPI: Fixed duplicate content in Procedure Dialogs.
  • Public: Added headers needed for mobile devices.
  • SQLServer: Retrieve index columns in the correct order.
  • Security: Check registry for disabled server protocols.
  • Security: Fixed issues resulting from page security updates in 1.4.2.
  • Security: Replaced last eval() with a coded calculate().
  • Security: Use a static copy of public_suffix_list.dat to avoid unexpected network requests.
  • SecurityScan: Added CVSS score where applicable.
  • SecurityScan: Temporarily removed SSL Cookie check.
  • Views: Fixed issue where view config was lost after adding or removing a view.
  • WebRequest: Fixed button visible with unmet bindings in Header or Body.