WorkflowGen v9.3.1

The WorkflowGen 9.3.1 release includes important security hardening, notable Administration UX upgrades, and new integrations.

Highlights

  • Enhanced security: stricter file upload validation, safer headers, and multiple security fixes.
  • Admin UX: frameless interface and clean URLs for a faster, modern experience.
  • New capabilities: SAML v2 authentication, Dropbox Sign integration, and a new XMLTOJSON application.
  • Platform updates: Node.js LTS alignment and dependency upgrades across modules and workflow applications.

Security

  • File uploads (workflow and process data) hardened with extension and content checks (#4327, #4326, #4334).
  • Multiple Administration Module security vulnerabilities remediated (#4312, #4309, #4308, #4322).
  • Security headers improvements: added report-only Content Security Policy (no breaking impact expected) (#4316) and anti-clickjacking (#4314); removed server/ASP.NET headers (#4315).
  • JavaScript encoding and HTML attribute safety improvements for enhanced XSS protection (#4350).
  • Error handling updated to show detailed exceptions and stack traces only in debug builds (#4313, #4325).
  • Reserved name validations added to process configuration (#4317, #4318).

Administration UX

Frameless Design

Experience a streamlined interface, free of legacy frames, for a more seamless and faster user experience.

Modern URLs

Navigation has been enhanced with clean, human-readable URLs, simplifying access to different pages and UI elements while adhering to modern web standards. URL parameters have been standardized to lowercase for consistency (#4219).

Notes

  • This version extensively uses URL Rewrite in IIS to properly reroute URLs. URL Rewrite rules must be configured in the inetpub\wwwroot\web.config file using the provided configuration file in the installation package.

  • Legacy URLs using the show.aspx endpoint and QUERY query string parameter are deprecated but remain supported without behavior changes.

New Features

  • SAML v2 Authentication: Enhanced authentication options with SAML v2 support for enterprise single sign-on integration (#4286, #4288).
  • Dropbox Sign Integration: New workflow applications for electronic signature management (DROPBOXSIGNSEND and DROPBOXSIGNCHECK) (#4139, #4124).
  • XMLTOJSON: New workflow application for seamless data format conversion between XML and JSON (#4215).

Improvements & Fixes

  • Administration: cleanup of unused/legacy parameters and hidden fields; prevention of unintended workflow button bypass; participant icon hover behavior corrected; user-friendly error messages when accessing non-existing processes via clean URLs (#4338, #4335, #4333, #4339, #4329, #4328, #4220, #4184).
  • Validation: enforced action/parameter name limits and process reserved name checks (#4176, #4262, #4317, #4318).
  • Form Designer: tools correctly update the TEMPLATE dropdown; improved Save As behavior (#4332, #4330).
  • Portal: fixed error when filtering on process data in search; fixed analytics error handling for numeric values exceeding Int32 limits; corrected dashboard button display in different contexts; improved report data rendering for nullable double values (#4321, #4349, #4196, #4355).
  • User Settings: improved dashboard view loading performance with dynamic loading and lazy initialization; limited view list width for better UI consistency; enhanced select menu styling for custom dashboard views (#4362, #4354, #4353, #4357).
  • Performance: optimized portal dashboard rendering by removing unnecessary rows for link-only sections (#4352, #4358).

Dependencies & Platform

  • All Node.js modules (GraphQL v5.3.0, Webhooks v6.2.0, Auth v3.2.0, and SCIM v3.1.0) continue to require Node.js 22.20.0 LTS (#4344).
  • Build configurations updated to Node.js 22.20.0; service dependencies upgraded in Auth, GraphQL, Webhooks, and SCIM (#4296, #4298, #4299, #4301, #4302, #4344).
  • JavaScript dependencies updated for common and Form Designer modules (#4280, #4281).
  • DocuSign workflow application upgraded to version 8.4.0 (#4274, #4276, #4348).
  • Docker: SQL Server image updated to Ubuntu 22.04 with Microsoft SQL Server 2022 (#4363).

Notes

Installation Packs

WorkflowGen 9.3.1 (Upgrade)
WorkflowGen 9.3.1 (Clean Install - PowerShell)
WorkflowGen 9.3.1 (Clean Install - Manual)

Documentation

WorkflowGen 9.3.1 Upgrade Guide: English - Français
WorkflowGen 9.3 PowerShell Installation: English - Français
WorkflowGen 9.3 Manual Installation: English - Français
WorkflowGen 9.3 Technical Guide: English - Français
WorkflowGen 9.3 Administration Guide: English - Français
WorkflowGen 9.3 User Portal Guide: English - Français
WorkflowGen 9.3 Integration Guide: English
WorkflowGen 9.3 for Azure: English - Français
WorkflowGen 9.x for Docker: English - Français
WorkflowGen Documentation: English - Français