EDI Changelog

24.17.1

Longer passwords accepted on the login screen

Added: 2026-08-12
Added by: Lennox Young
Ticket: https://sandfield.atlassian.net/browse/CD-158 

• The password box on the login screen now accepts up to 50 characters instead of 20, to match the password input size in SALCore.

• Updated Messaging nuget to 24.21.1

24.17.0

Warning prompt when saving changes to C# and T-SQL function code

Added: 2026-08-12
Added by: Lennox Young
Ticket: https://sandfield.atlassian.net/browse/CD-598 

• Saving a change to a C# function now asks for confirmation first, warning that the code is compiled and executed on the server and could potentially change anything on the server it runs on (files, databases and other systems), so it should be reviewed closely before saving. Confirming the prompt states that the user is taking responsibility for the actions the function performs.

• Saving a change to a T-SQL function now asks for confirmation first, warning that a badly written query can return incorrect data, lock or overload the database, or modify or delete data, so it should be reviewed closely before continuing. The same statement of responsibility applies when confirming.

• The prompt only appears when the code or the function type has actually been changed, so simply opening a function and saving other details is unaffected. Built-in functions never prompt.

• The prompt also appears the first time a new C# or T-SQL function is saved, including when switching to a child tab on an unsaved function (which saves it automatically).

• Both warning messages have been added to the English and Chinese resource files.

24.16.0

Updated Scheduling & Messaging Version

Added: 2026-08-04
Added by: Nikhil Kamble
Ticket: https://sandfield.atlassian.net/browse/CD-411 

• Updated Scheduling to 22.3.0

• Messaging Version to 24.22.0

24.15.1

Remediate GHAS Critical and High dependency alerts plus first-party XSS/injection findings

Added: 2026-08-07
Added by: Nikhil Kamble
Ticket: https://sandfield.atlassian.net/browse/CF-43949 

Dependency upgrades (clears all 4 Critical and all High dependency-scanning alerts):

• Deleted the vendored WorkWith/EDI/scripts/c3-0.4.14 charting library outright (231 files), which carried lodash CVE-2019-10744 (Critical) and around 10 other npm advisories in its bundled dev dependencies. No runtime change: nothing in the product calls the c3 API - the only reference is a commented-out line in Process.js, and the dashboard charts use Highcharts.

• Removed the unused Sandfield.EDI.Portal.Web project. It is not in the solution or any build pipeline and has been superseded by the dedicated SAL.EDI.Crossfire.Portal repository; leaving it in place meant re-patching its dependencies on every future security sweep.

• System.Text.Encodings.Web 4.7.0 → 4.7.2 (CVE-2021-26701, Critical).

• Newtonsoft.Json → 13.0.3 across 10 projects (CVE-2024-21907).

• SixLabors.ImageSharp → 2.1.10 (CVE-2024-41131, CVE-2025-27598).

• SharpZipLib 0.86.0 → 1.4.2 in the four projects still on the old version (CVE-2021-32840).

• System.Security.Cryptography.Xml 9.0.0 → 9.0.15 (CVE-2026-26171, CVE-2026-33116).

• Microsoft.Extensions.Caching.Memory 8.0.0 → 8.0.1 (CVE-2024-43483).

• System.Net.Http 4.3.1 → 4.3.4 (CVE-2017-0247, CVE-2017-0249, CVE-2018-8292).

• Microsoft.Data.SqlClient 1.1.4 → 2.1.7 and .SNI 1.1.0 → 2.1.1 (CVE-2024-0056).

• RestSharp 106.6.10 → 106.15.0 (CVE-2021-27293).

• Moment.js 2.11.0 → 2.29.2, manifest and physical script files (CVE-2022-24785).

Code-scanning fixes:

• Database connections are now encrypted in transit: Encrypt=True is enforced on every Engine SQL connection. Each environment's SQL Server must present a certificate the host trusts, or connections will fail - verify before deploying. An environment whose certificate is not trusted can set TrustServerCertificate=True in its own connection string; encryption still applies.

• Every development connection string now points at 127.0.0.1 with TrustServerCertificate=True and a _TST database, so a local SQL Server with a self-signed certificate keeps working now that encryption is enforced. This also removes the four checked-in connection strings that still pointed at the production server, along with stale references to SADXFTEST1, SALTEST1, ANTONIO and WIN-17RIAAGM8IK. Several of these carried Encrypt=False, which the code overrode anyway, so the configs now say what actually happens. Deployment note: none of these projects transform connection strings in Web.Release.config, so confirm how each deployed instance is given its real connection string before releasing.

• DOM XSS in WorkWith and Portal scripts: label/tab text written via textContent/.text() instead of innerHTML/.html(); URL values encoded with encodeURIComponent; router scroll-offset key guarded against prototype pollution; HTML-escape helper reordered to escape & first; regex escapes made global.

• Reflected XSS in WebAPI/ServiceV2 responses: reflected content now served as text/plain with X-Content-Type-Options: nosniff.

• Regex injection in the Action controller: the user-supplied file-name filter regex now runs with a 2-second match timeout, and a timeout is treated as "no match" rather than failing the request.

• Authentication bypass in SubmitWithTransportBytes (both services): a transport that has credentials configured now always requires a valid auth header. BREAKING for any caller that submitted to a credentialed transport without an auth header (they will now receive 401); transports without credentials remain anonymous. Requires partner verification before release.

• Removed the unauthenticated LookupTest.aspx/LookupUI.js and PanelTest.aspx pages, which allowed stored procedures to be executed without logging in.

• Builds now run in Release with compilation debug="false", and the Portal and WorkWith admin apps send X-Frame-Options and X-Content-Type-Options headers.

Also fixed along the way: the three Dashboard web parts only copied into the portal's bin when built in Debug, so building in Release silently stopped deploying them (this is why the System Performance chart could go missing and DLLs were being copied by hand). Their Release output now goes to the same place.

Not addressed (tracked on CF-43949): vendored third-party JS advisories (bootstrap, jQuery, and similar), the cs/web/request-validation-disabled findings (deliberate, as WorkWith posts HTML/EDI markup), and the RazorEngine advisory (no fix exists; assessed as not exploitable because the template is an admin-configured setting run through the non-isolated engine). A latent functional bug was also noted: the SPEEDI branch inside the BASIC auth case is dead code.

24.15.0

Process import/export: environment comparison and duplicate-on-import

Added: 2026-08-04
Added by: Nikhil Kamble
Ticket: https://sandfield.atlassian.net/browse/CD-321 

• Added a Comparison tab to the Process screen: upload a process exported from another environment and see a colour-coded difference report of what differs from this environment before importing. The report is grouped by the source process and each destination process, then by category (message standard, mappings, functions, transports, routes, system tests).

• Message-standard elements are shown grouped under their segment with readable names (for example SG0.Order.OrderNumber); added, removed, modified and unlinked items are colour-coded, and element identifiers use the short SG1/58 form.

• Mappings whose source element no longer exists in the message standard are highlighted as "unlinked", so broken links are visible before they cause a run-time failure.

• Importing a process that already exists now runs the comparison automatically and shows it on the Comparison tab.

• The comparison can be downloaded as a CSV or PDF report; the PDF is grouped by process then category.

• Made the on-screen report easier to read: changed rows now show in plain black text with only the parts that actually differ highlighted, and a value that is missing on one side is shown as "(empty)".

• Each comparison category can be expanded or collapsed on its own, with "Expand all" and "Collapse all" buttons; the longer sections (transports, mappings, message standard) start collapsed.

• Added a "Duplicate if already exists" option when importing a process: instead of blocking the import when the partner/event already exists, it keeps the existing process (marked "(Legacy)") and imports the incoming process alongside it as a genuinely independent process.

• Fixed the Import button being missing when viewing a process that already exists - it was only ever shown when creating a brand-new process. Importing onto an existing process now works from that process's own screen (still auto-runs the comparison first), as well as from New Process.

• Clearer messages when an invalid or wrong-type file is uploaded for import, including when the file itself is internally inconsistent (e.g. a mapping function that doesn't match anything in the file or the database).

• Updated Messaging nuget to 24.21.0

24.14.0

Add change-history ("History") tab to EDI Work With screens

Added: 2026-08-01
Added by: Nick
Ticket: https://sandfield.atlassian.net/browse/CD-390 , https://sandfield.atlassian.net/browse/CD-537 

• Added a new "History" tab to the main EDI Work With screens — Partner, Event, Function, Message Standard, Process, Code List, Assembly Reference and Setting — showing an audit trail of changes to that record and its child rows, as Modified, Modified By, Table, Field, From and To.

• The tab reads the database change-auditing data introduced alongside this release, so users can see who changed a configuration value and when, directly from the record's edit page.

• Updated the EDI XML, EDIFACT and X12 import to send segment and data-element descriptions as nvarchar(max) instead of the deprecated ntext type, matching the database column migration shipped in this release, so long descriptions are no longer truncated on import.

24.13.0

Add prefix to keyvault secret names

Added: 2026-07-29
Added by: Eve Ryan
Ticket: https://sandfield.atlassian.net/browse/CF-43274 

• Updated Sandfield.Keyvault loader to use a prefix. The prefix defaults to Crossfire- but can be overridden by the app setting KeyVaultPrefix.

• This allows for multiple environments to use the same Key Vault without overwriting each other's secrets.

• Updated the admin portal Dashboard transports section to use Keyvault.

24.12.9

Fix Tests tab edit showing "null" in Name and Test Interchange

Added: 2026-07-29
Added by: Nick
Ticket: https://sandfield.atlassian.net/browse/CF-43715 

• Fixed an issue on the Tests tab of a Process where clicking Edit on a test filled the Name and Test Interchange fields with the literal text "null" instead of the test's actual values.

• Editing a test now also correctly restores its Active status and the underlying record, so saving updates the intended test.

24.12.8

Fix tab content areas not resizing with the browser window

Added: 2026-07-17
Added by: Gavin Cheng
Ticket: https://sandfield.atlassian.net/browse/CF-42123 

• Fixed scrollable tab content areas (such as the Life Cycle tab on Message and Message Archive) not growing to fill the tab when the browser window was resized without refreshing the page. The content now resizes to fit the window automatically.

24.12.7

Fix Sandfield.Keyvault vulnerability

Added: 2026-07-17
Added by: Eve Ryan
Ticket: https://sandfield.atlassian.net/browse/CF-43274 

• Updated Sandfield.Keyvault dependency from 5.2.0 to 5.2.2 to address a security vulnerability in DPAPI for a 3rd party library with a transient reference to System.Drawing.Common.

24.12.6

Fix missing SSO provider icons on the logon page

Added: 2026-07-17
Added by: Gavin Cheng
Ticket: https://sandfield.atlassian.net/browse/CD-577 

• Fixed SSO sign-in buttons on the logon page (Okta, Entra, etc.) losing their provider icon when the button label is customised, for example renaming "Entra" to "Entra (Client Name)". Icons now display based on the provider rather than the exact label text.

24.12.5

Fix localhost connection strings

Added: 2026-07-16
Added by: Nick
Ticket: https://sandfield.atlassian.net/browse/CF-43370 

• Fixed all connection strings, so it's easier to reference which connection string is being used in the portal and in the database.

24.12.4

Fix dashboard and navigation console errors (post-UAT)

Added: 2026-07-14
Added by: Nikhil Kamble
Ticket: https://sandfield.atlassian.net/browse/CF-43228 , https://sandfield.atlassian.net/browse/CF-43229 , https://sandfield.atlassian.net/browse/CF-43230 , https://sandfield.atlassian.net/browse/CF-43231 , https://sandfield.atlassian.net/browse/CF-43232 

• Fixed a JavaScript error when hovering the "More" tab in the portal navigation; the hover arrow now appears on the More tab like the other tabs.

• Fixed dashboard scripts being blocked from loading due to a misspelled script content type. This also clears the related "transportDetails/scheduleDetails is not defined" errors on the old dashboard.

• Fixed errors that appeared when resizing the dashboard browser window.

• Stopped the dashboard message-count refresh from sending an invalid value to the server, removing one source of repeated console errors.

• Internal: removed a duplicate embedded-resource registration and corrected the stylesheet link attribute on the dashboard sections.

• Known remaining (handed off): two dashboard stylesheets still return 404 (owned by an external dashboard control assembly not in this repo), and the message stats service still errors on one call path pending a decision on the fix approach.

24.12.3

Updated Messaging to 24.17.4

Assigned to: Nikhil
Updated: 2026-07-06
Ticket: https://sandfield.atlassian.net/browse/CD-411 

• Updated Messaging to 24.17.4

24.12.2

Increase maximum request size for EDI Web Service

Added: 2026-06-23
Added by: Nick
Ticket: https://sandfield.atlassian.net/browse/CF-42297 

• Increased the maximum allowed upload/request size from 10 MB to 20 MB so larger files can be processed.

• Removed a duplicate, empty notification email image path configuration entry.

24.12.1

Fix Next/Prev navigation on Queued Messages

Added: 2026-06-22
Added by: Nikhil Kamble
Ticket: https://sandfield.atlassian.net/browse/CF-41284 

• Fixed delete operations on EdiFunction, Interchange, and Message pages causing a blank popup instead of closing. The root cause was a missing FK cascade in the Function_Delete stored procedure (fixed in DB Migrator), combined with no error handling in the page's delete method. Added defensive error handling so any future delete failures show the error message instead of a blank page.

• Fixed Next/Prev navigation on Queued Messages (standard tab, non-expandable) incorrectly trying to load details when the server renders SQL NULL as the literal string "NULL" in HTML attributes.

• Added defensive null guards and case normalisation for expandable table Next/Prev navigation to prevent crashes on missing panel attributes.

• Added a double-submit guard to the Object save/apply flow to prevent session hangs caused by rapid keyboard shortcut use (e.g. spamming Alt+A).

• Added closeOnLoad early-return guards and null-checks on ACE editor DOM elements across all Object pages to prevent JS crashes during post-delete re-render.

• Added cache-busting ?v= version parameter to all script tags across the portal for consistent browser cache invalidation on deployment.

• Added ?nocache query parameter / cookie support to force fresh JS/CSS loads during development without needing to clear browser cache.

24.12.0

Add Engine Translation Version 6.0

Assigned to: Eve
Updated: 2026-05-20
Ticket: https://sandfield.atlassian.net/browse/CF-35433 

Engine:

• New translation version (6) with Excel-like CSV parsing behaviour

• Text qualifier aware: handles escaped/nested qualifiers within delimited fields

Work With Module:

• Add version 6 option to the Translation Version dropdown

24.11.0

Add SSO support for Okta and Entra in EDI Portal

Assigned to: Gavin
Updated: 2026-05-15
Ticket: https://sandfield.atlassian.net/browse/CD-489 

Work With Module:

• Added optional SSO links to the EDI Portal login page, configured with SAL.Login.SSOLink.* and SAL.Login.ReturnUrl.

• Added the Sandfield Login SSO application under WorkWith\sso, including Okta and Entra provider support.

• Added JWT configuration support for the SSO handoff back into WorkWith.

• Updated Web.config binding redirects and package references needed by the SSO integration.

• Updated the Azure Pipeline publish profile and project packaging so WorkWith\sso runtime files and WorkWith\bin content are included in published artifacts.

24.10.0

Updated Messaging & Scheduling

Assigned to: Nikhil
Updated: 2026-05-07
Ticket: https://sandfield.atlassian.net/browse/CD-411 

• Updated Messaging to 24.16.0

• Updated Scheduling to 22.1.2

24.9.6

Fix binding redirects, Generate HTML Message error, and Key Vault configuration check

Assigned to: Nikhil, Eve
Updated: 2026-05-07
Ticket: https://sandfield.atlassian.net/browse/CD-411 

• Fixed binding redirects in Web.config and added Sandfield.EDI.Engine.dll.config

• Fixed Generate HTML Message button crashing with "Exception has been thrown by the target of an invocation" by moving Validate call inside Try/Catch

• Added null-checking in JavaScript to display a friendly error instead of a TypeError

• Fixed IsKeyVaultConfigured() returning inverted result, causing connection attempts to an empty Key Vault URI

• Fixed next/previous object navigation in WorkWith2 for standard object tabs where groupobject is empty

• Centered the next/previous object button labels

• Added OpenWorkWithItemsInNewTab toggle support so Work With item windows can open in browser tabs instead of in-page popups

24.9.5

Fix using arrow buttons on schedules page

Assigned to: Eve
Updated: 25 February 2026

• Can now separately iterate over schedule groups and schedules.

24.9.4

Load Secrets from Azure Key Vault

Added by: Eve
Assigned to: Eve
Updated: 2 January 2026

• Load Secrets from Azure Key Vault

24.9.3

Improve the DLL version sheet and add a new sheet for server info

Assigned to: Gavin
Updated: 15 April 2026
Ticket: https://sandfield.atlassian.net/browse/CF-38612 

• Improve the DLL version sheet to cover mo

24.9.2

Refactor GoogleSheetVersionUpdate DLL discovery and sheet update logic

Assigned to: Gavin
Updated: 17 March 2026

• Added regex-based DLL filtering to target specific Sandfield/SAL Messaging assemblies, excluding Tests, Migrator, and TestHarness

• Added configurable subdirectory scanning via new IncludeSubdirectories app setting

• Rewrote sheet update logic to support adding new column headers for machines and new rows for unmatched addins

• Removed unused dependencies

• Added TestHarness console project for local testing

24.9.1

Replace Octopus Deploy with Azure Pipeline Artifacts

Assigned to: Nikhil
Updated: 27 February 2026
Ticket: https://sandfield.atlassian.net/browse/CD-411 

• Replaced Octopus deploy steps with Azure Pipeline artifact publishing

24.9.0

Fixed Partner Settings Edit fields pre-filling with undefined.

Assigned to: Remus
Updated: 01 January 2026

• Pressing Edit now correctly fills the Key and Value fields with the setting's current values.

24.8.1

Use application/xml as default webservice response content type

Added by: Eve
Assigned to: Eve
Updated: 4 December 2025

• Default web service content type will now be overridable by transport settings (still application/xml by default).

24.8.0

Preserve Partner from Interchange for Portal Out Processes

Added by: Nikhil
Assigned to: Nikhil
Updated: 17 November 2025

• Added PreservePartnerFromInterchange checkbox to Process configuration (Portal Out processes with destinationType = Messaging)

• Added PreservePartnerFromInterchange property to PartnerEvent class

• Modified Interchange.cs DeliverToMessaging() to pass Partner.PartnerID when PreservePartnerFromInterchange is enabled

• Allows Portal Out processes to stamp MSG.Message with EDI Interchange Partner instead of transport's default partner

24.7.1

Fix a bug where synchronous messages would get stuck in "Sending" status indefinitily.

Fix a memory leak in the engine

Added by: Scott
Assigned to: Scott
Updated: 25 November 2025

24.7.0

Highlight DataElement Attributes

Added by: Gavin
Assigned to: Gavin
Updated: 16 October 2025

Work With Module:

• Support highlighting DataElement attributes

• Make it directly jump to the highlight after clicking nodes in the message structure

• Support highlighting the nodes in the message structure panel

24.6.2

Remove TinyMCE references

Added by: Nikhil
Assigned to: Nikhil
Updated: 16 October 2025

• Removed all references of TinyMCE

24.6.1

Fix Copying EDIFACT Message Standards

Added by: Eve
Assigned to: Eve
Updated: 13 October 2025

Work With Module:

• Fix loading of EDIFACT message standards without page IDs, which happens while copying one.

24.6.0

Add ability to store and load Assembly References from Database

Added by: Nick
Assigned to: Nick
Updated: 21 August 2025

Work With Module:

• Add maxAllowedContentLength setting in the Web.config

• Improve Function Test Error logging in general, including the Function Test

• On the Assembly Reference Page:

  • Add Storage Type option that allows the user to select either Disk or Database (Disk is default)

  • When the user selected Database, it allows the user to upload & download the Dll file

• On the Function Page:

  • Improve the error message when failed to import

  • Fixed up some UI when importing the function -> not showing the Return Type value

  • Refactored the HTML part in the Function js file

  • Update the Assembly Reference tab and add a new column that indicates where it is stored (Db or Disk)

  • Improve validation when inserting Assembly Reference to the function -> Cannot insert dupliate AR

Engine:

• Improve the dictionary CrossfireFunctions with ConcurrentDictionary

• Improve error message for missing connection string is not provided before running the SQL function

• Add support to load Assembly Reference from database

24.5.3

Use the default keep for days setting for processes

Assigned to: Gavin
Updated: 5 September 2025

• Use the default keep for days setting for processes

24.5.2

Improve the stability of the engine

Added by: Gavin
Assigned to: Gavin
Updated: 05 August 2025

• Improve the stability of the engine

24.5.1

Fix margins in dashboard

Added by: Gavin
Assigned to: Gavin
Updated: 04 August 2025

• Fix margins in dashboard

24.5.0

Fixing text qualifier in Engine

Added by: Nick
Assigned to: Nick
Updated: 31 July 2025

• Incorrectly parsed double quote character in CSV

• Improve error message if Delimeter message standard is not set up correctly

• Upgrade Messaging in Engine TestHarness

24.4.2

Rename Health Check Stored Procedure Parameter

Added by: Nick
Assigned to: Nick
Updated: 31 July 2025

• Rename Health Check Stored Procedure Parameter

24.4.1

Authentication Bug Fix

Added by: Nikhil
Assigned to: Nikhil
Updated: 30 July 2025

• Get the username and password from the auth header first and then fallback to user it from the request body if not present in the header.

24.4.0

Improve Function Test UX

Added by: Nick
Assigned to: Nick
Updated: 21 July 2025

• Improve function test error message by showing it under the function. Was showing it via the windows pop up message.

• Improve the error message by only showing the exception message and not the stacktrace.

• When executing the function in Engine, there's a parameter that let you choose to throw a detailed exception or just exception message only.

24.3.1

Insert Function Bug

Added by: Nick
Assigned to: Nick
Updated: 12 June 2025

• Previously, when we insert functions, we insert the blank EntityID as 0 instead of null. So we had an issue when we were trying to look up the functions.

24.3.0

Updated OPCC to return full error response

Added by: Lennox
Assigned to: Lennox
Updated: 3 June 2025

• Updated incoming and outgoing OPCC endpoints to capture the response message and pass it back to the Web API transport

24.2.12

Public Holiday Importer - Subtract Days

Added by: Eve
Assigned to: Eve
Updated: 17 July 2025

• Add ability to subtract days in public holiday importer.

24.2.11

Remove initial size from all string builder constructors - hopefully reduce memory usage

Added by: Scott
Assigned to: Scott
Updated: 10 July 2025

• Remove initial size from all string builder constructors - hopefully reduce memory usage. When using dotMemory, a lot of these were found to be empty or near empty

24.2.10

Add content-type header to the OutgoingHttp WebAPI

Added by: Nick
Assigned to: Nick
Updated: 12 May 2025

• Add content-type header to the OutgoingHttp WebAPI

24.2.9

Update Web Service & EDI WorkWith Web.config

Added by: Nick
Assigned to: Nick
Updated: 24 Apr 2025

• Updated the Identity and ServiceName in Web.config

• Added <pages validateRequest="false"/> in Web.config

• Added <httpCookies httpOnlyCookies="true" requireSSL="true" /> in EDI Web.config

24.2.8

Fix Azure Pipeline - tag automated pipeline

Added by: Nick
Assigned to: Nick
Updated: 19 Mar 2025

• Fixing Azure Pipeline, failed to build because the project is referencing missing files in bin folder

24.2.7

Fix Azure Pipeline - tag automated pipeline

Added by: Nick
Assigned to: Nick
Updated: 19 Mar 2025

• Fixing Azure Pipeline, failed to build because the project is referencing missing files in bin folder

24.2.6

Fix all the dependency issues on EDI WorkWithModule

Added by: Nick
Assigned to: Nick
Updated: 18 Mar 2025

• EDI WorkWithModule is now using the new version of nugets without any login issue

• Upgrade Messaging nuget, which remove the SixLabors security patches

24.2.5

Update messaging, remove unused nugets

Added by: Scott
Assigned to: Scott
Updated: 12 Mar 2025

• Update messaging, remove unused nugets

24.2.4

Add better error logging to the XPathValue built in function

Added by: Scott
Assigned to: Scott
Updated: 12 Mar 2025

• Add better error logging to the XPathValue built in function

24.2.3

Fix bugs on Bulk Export page and Process page

Added by: Gavin
Assigned to: Gavin
Updated: 07 Mar 2025

• Fix the null reference error on Crossfire Admin -> Bulk Export page when user doesn't have permissions to ALL of the following objects: Functions, MessageStandards, Processes.

• Fix a UI bug on Process page.

24.2.2

Fix the previous engine change - adding text qualifier message standard

Added by: Nick
Assigned to: Nick
Updated: 06 Mar 2025

• The position can be any number below 0 and we didn't account that.

24.2.1

Downgrade Microsoft.Identity.Client to 4.56.0

Added by: Nick
Assigned to: Nick
Updated: 03 Mar 2025

• Downgrade Microsoft.Identity.Client to 4.56.0

24.2.0

Implement OAuth2 feature to Crossfire Service V2

Added by: Nick
Assigned to: Nick
Updated: 14 Feb 2025

• Implement OAuth2 feature to Crossfire Service V2

24.1.38

Fix text qualifier in delimited message standard

Added by: Nick
Assigned to: Nick
Updated: 10 Feb 2025

• Previously, if there's a newline character in a cell, it will actually go to the new line instead of counting that character into the cell even though the text qualifier is specified.

24.1.37

Fix validating function name in the mapping

Added by: Nick
Assigned to: Nick
Updated: 03 Feb 2025

• Previously, it does not check if the function name exists or not. So it will not clear the look up field when it is using an invalid function name.

• Also made the function not a required field, as we previously never validate that field. (If we make it a required field, it will complain it when we try to save the process)

24.1.36

Fix "Insecure cookie setting"

Added by: Nick
Assigned to: Nick
Updated: 16 Jan 2025

• Fix "Insecure cookie setting: missing Secure flag"

24.1.35

Fix notification message

Added by: Nick
Assigned to: Nick
Updated: 13 Jan 2025

• Use process name for the process field, instead of ServiceProvide.Name 

24.1.34

Add different favicons

Added by: Scott
Assigned to: Scott
Updated: 09 January 2025

• Add different favicons

24.1.33

Fix a bug when reading CDATA XML elements out of order

Added by: Scott
Assigned to: Scott
Updated: 09 January 2025

• Fix a bug when reading CDATA XML elements out of order. There is logic to start searching elements from the beginning, but it does not contain the CDATA nodeReader.NodeType logic

• https://mainfreightit.atlassian.net/browse/EUCRF-267 

24.1.32

Upgrade Scheduling nuget

Added by: Nick
Assigned to: Nick
Updated: 15 Nov 2024

• Upgrade Scheduling nuget

24.1.31

Updated WebService

Added by: Jacob
Assigned to: Jacob
Updated: 14 Nov 2024

• Added new backend functionality to accept the GetLifecycle WebMethod call.

24.1.30

Clean up

Added by: Nick
Assigned to: Nick
Updated: 13 Nov 2024

• Add "URL Rewrite" in Web Service V2, so no more manual config fix

• Clean up and update the nugets to match the version with Crossfire and scheduling

• Vulnerable patching System.Text.Json -> 8.0.5

24.1.29

Update pipeline

Added by: Nick
Assigned to: Nick
Updated: 06 Nov 2024

• Missing deadman switch pipeline

• Remove EB Test pipeline

• Fix typo

24.1.28

Improve monitoring function

Added by: Nick
Assigned to: Nick
Updated: 05 Nov 2024

• Improve monitoring function

24.1.27

Missing images

Added by: Nick
Assigned to: Nick
Updated: 25 Oct 2024

• Missing images in /Source/Sandfield.EDI.Admin.WorkWithTheme/Image/Layout

24.1.26

Update web.config

Added by: Nick
Assigned to: Nick
Updated: 18 Oct 2024

• Update Web.config

24.1.25

Forgot to update moment.js

Added by: Nick
Assigned to: Nick
Updated: 20 Sept 2024

• Updated moment.js in messaging, but forgot to update here

• Remove all debug="true"

24.1.24

Remove all Database Migrations in this solution

Added by: Nick
Assigned to: Nick
Updated: 07 Oct 2024

• Remove all Database Migrations in this solution because will be using the newer database migration

24.1.23

Added MessageAttachment Index

Added by: Jacob
Assigned to: Jacob
Updated: 20 Sept 2024

• Added Index IX_MessagePrimaryID on table MessageAttachment. This was causing issues with the purger if there were many messages with attachments.

24.1.22

Fix missing dll

Added by: Nick
Assigned to: Nick
Updated: 17 Sept 2024

• Missing Sandfield.SALCore.PasswordSecurity.dll when deploying it

24.1.21

Fix Life Cycle & Web Service

Added by: Nick
Assigned to: Nick
Updated: 12 Aug 2024

• Full Life Cycle was showing Inbound "direction" even though it is an Outbound Message Archive.

• And the Status was not showing because it is a null.

• The reason is causing this is because it is joining the Interchange table, however the message is getting route, so it won't show up at all.

• Add max request in web service in web.config

24.1.20

Fix a bug when checking for unsafe file types

Added by: Gavin Cheng
Assigned to: Gavin Cheng
Updated: 13 Aug 2024

• Fix a bug when checking for unsafe file types

24.1.19

Fix web service again

Added by: Nick
Assigned to: Nick
Updated: 09 Aug 2024

• Fix web service response where it includes the aspx content

24.1.18

Fix web service response

Added by: Nick
Assigned to: Nick
Updated: 09 Aug 2024

• Fix web service response where the logic was incorrect

• Update SettingXml to SettingsXml

24.1.17

Update Azure Pipeline

Added by: Nick
Assigned to: Nick
Updated: 07 Aug 2024

• Update Azure Pipeline for package Sandfield.SAL.EDI.Web.ServiceV2

24.1.16

Fixing folder path in DB Migration

Added by: Nick
Assigned to: Nick
Updated: 31 July 2024

• Fixing folder path in DB Migration

24.1.15

Updated version of messaging

Added by: Nick
Assigned to: Nick
Updated: 31 July 2024

• Updated Messaging references to 24.2.5

24.1.14

Missing Show Inactive filtering for some WKW objects

Added by: Nick
Assigned to: Nick
Updated: 24 July 2024

Missing Show Inactive filtering for some WKW objects

24.1.13

Log the errors on the message instead of in the log files

Added by: Gavin Cheng
Assigned to: Gavin Cheng
Updated: 29 July 2024

• Log the errors on the message instead of in the log files

24.1.12

Fix settings for empty cData Nodes

Added by: Eve Ryan
Assigned to: Eve Ryan

• Fixed error when a mapping produces empty cData nodes when
  the remove empty elements setting on the message standard is
  set to "Convert empty elements to short tags" or is marked with ##EMPTY##
  for "defined on data element". These empty cData nodes will now be removed.

24.1.11

Include TLS 1.2 on Webservice HTTP Request

Added by: Jacob
Assigned to: Gavin

• This update adds TLS 1.2 to the SecurityProtocol before creating the request.

24.1.10

Updated version of messaging

Added by: Lennox Young
Assigned to: Lennox Young
Updated: 17 July 2024

• Updated Messaging references to 24.2.3

24.1.9

cXML Support for web service responses

Added by: Eve Ryan
Assigned to: Eve Ryan

• Fixed cXML response not being returned when enabled on the incoming transport

• Fix error due to reloading settings

24.1.8

Fix engine location

Added by: Nick
Assigned to: Nick

• Fix engine location.
  The engine location was having two dash "\" and the external system table was not updated as well.

24.1.7

Fix to Message Attachment Validation

Added by: Jacob Clark
Assigned to: Jacob Clark

• There was an off by one error, as well as an unwanted side effect of altering/removing items from the attachment ArrayList.

24.1.6

Update error message when importing duplicate message standards

Added by: Gavin Cheng
Assigned to: Gavin Cheng

• Update error message when importing duplicate message standards, to include the Message Standard name.

24.1.5

Fix variable in code for migration

Added by: Nick
Assigned to: Nick

• Fix variable in code for migration

24.1.4

Fix variable in code for migration

Added by: Nick
Assigned to: Nick

• Fix variable in code for migration

24.1.3

Update External System Engine path location

Added by: Nick
Assigned to: Nick

• Update External System Engine path location, because we moved the engine to subfolder.

24.1.2

Fixed Entity checking on PreRendering

Added by: Nick
Assigned to: Nick

• Entity ID is null when open New Code List. We shouldn't do entity checking for it.

24.1.1

Fixed building options

Added by: Lennox
Assigned to: Lennox

• Updated the EDI SALCore proj file to mark all proc and function sql files as embedded resources and build all dependencies.

24.1.0

Upgraded EDI SALCore to .NET Standard

Added by: Lennox
Assigned to: Lennox

• Upgraded SALCore from .NET Framework to Standard

24.0.5 - 24.0.6

Fixed migrations

Added by: Nick
Assigned to: Nick

• Fixed migrations

24.0.4

Move engine to subfolder

Added by: Nick
Assigned to: Nick

• Move engine to subfolder. Was in the engine root folder and was causing quite a lot of dependency issue.

24.0.3

Permission checking SP was all over the place

Added by: Nick
Assigned to: Nick

• There were 2 versions of permission checking SP in 2 different database. Fixed it by properly using the SP in the correct database.

24.0.2

Fixing open new function stuck bug

Added by: Nick
Assigned to: Nick

• After we added the function test, when we open a new function, it will be stuck at loading because it is trying to load the tests for the function.

24.0.1

Fix dependencies

Assigned To: Lennox Young
Added By: Lennox Young

• Updated salcor dependencies to 3.4.1

• Updated scheduling dependencies to 21.2.1

• Updated messaging dependencies to 24.0.3

• Fixed broken migrations