The WorkflowGen 9.3.1 release includes important security hardening, notable Administration UX upgrades, and new integrations.
Highlights
- Enhanced security: stricter file upload validation, safer headers, and multiple security fixes.
- Admin UX: frameless interface and clean URLs for a faster, modern experience.
- New capabilities: SAML v2 authentication, Dropbox Sign integration, and a new
XMLTOJSONapplication. - Platform updates: Node.js LTS alignment and dependency upgrades across modules and workflow applications.
Security
- File uploads (workflow and process data) hardened with extension and content checks (#4327, #4326, #4334).
- Multiple Administration Module security vulnerabilities remediated (#4312, #4309, #4308, #4322).
- Security headers improvements: added report-only Content Security Policy (no breaking impact expected) (#4316) and anti-clickjacking (#4314); removed server/ASP.NET headers (#4315).
- JavaScript encoding and HTML attribute safety improvements for enhanced XSS protection (#4350).
- Error handling updated to show detailed exceptions and stack traces only in debug builds (#4313, #4325).
- Reserved name validations added to process configuration (#4317, #4318).
Administration UX
Frameless Design
Experience a streamlined interface, free of legacy frames, for a more seamless and faster user experience.
Modern URLs
Navigation has been enhanced with clean, human-readable URLs, simplifying access to different pages and UI elements while adhering to modern web standards. URL parameters have been standardized to lowercase for consistency (#4219).
Notes
-
This version extensively uses URL Rewrite in IIS to properly reroute URLs. URL Rewrite rules must be configured in the
inetpub\wwwroot\web.configfile using the provided configuration file in the installation package. -
Legacy URLs using the
show.aspxendpoint andQUERYquery string parameter are deprecated but remain supported without behavior changes.
New Features
- SAML v2 Authentication: Enhanced authentication options with SAML v2 support for enterprise single sign-on integration (#4286, #4288).
- Dropbox Sign Integration: New workflow applications for electronic signature management (
DROPBOXSIGNSENDandDROPBOXSIGNCHECK) (#4139, #4124). - XMLTOJSON: New workflow application for seamless data format conversion between XML and JSON (#4215).
Improvements & Fixes
- Administration: cleanup of unused/legacy parameters and hidden fields; prevention of unintended workflow button bypass; participant icon hover behavior corrected; user-friendly error messages when accessing non-existing processes via clean URLs (#4338, #4335, #4333, #4339, #4329, #4328, #4220, #4184).
- Validation: enforced action/parameter name limits and process reserved name checks (#4176, #4262, #4317, #4318).
- Form Designer: tools correctly update the TEMPLATE dropdown; improved Save As behavior (#4332, #4330).
- Portal: fixed error when filtering on process data in search; fixed analytics error handling for numeric values exceeding Int32 limits; corrected dashboard button display in different contexts; improved report data rendering for nullable double values (#4321, #4349, #4196, #4355).
- User Settings: improved dashboard view loading performance with dynamic loading and lazy initialization; limited view list width for better UI consistency; enhanced select menu styling for custom dashboard views (#4362, #4354, #4353, #4357).
- Performance: optimized portal dashboard rendering by removing unnecessary rows for link-only sections (#4352, #4358).
Dependencies & Platform
- All Node.js modules (
GraphQL v5.3.0,Webhooks v6.2.0,Auth v3.2.0, andSCIM v3.1.0) continue to require Node.js22.20.0 LTS(#4344). - Build configurations updated to Node.js 22.20.0; service dependencies upgraded in Auth, GraphQL, Webhooks, and SCIM (#4296, #4298, #4299, #4301, #4302, #4344).
- JavaScript dependencies updated for common and Form Designer modules (#4280, #4281).
DocuSignworkflow application upgraded to version8.4.0(#4274, #4276, #4348).- Docker: SQL Server image updated to Ubuntu 22.04 with Microsoft SQL Server 2022 (#4363).
Notes
- For background on earlier enhancements and major features, refer to the WorkflowGen 9.0.0, WorkflowGen 9.1.0 and WorkflowGen 9.2.4 release notes.
Installation Packs
WorkflowGen 9.3.1 (Upgrade)
WorkflowGen 9.3.1 (Clean Install - PowerShell)
WorkflowGen 9.3.1 (Clean Install - Manual)
Documentation
WorkflowGen 9.3.1 Upgrade Guide: English - Français
WorkflowGen 9.3 PowerShell Installation: English - Français
WorkflowGen 9.3 Manual Installation: English - Français
WorkflowGen 9.3 Technical Guide: English - Français
WorkflowGen 9.3 Administration Guide: English - Français
WorkflowGen 9.3 User Portal Guide: English - Français
WorkflowGen 9.3 Integration Guide: English
WorkflowGen 9.3 for Azure: English - Français
WorkflowGen 9.x for Docker: English - Français
WorkflowGen Documentation: English - Français