4.5.32 (Dec 2009)

Security enhancement
When index.jsp outputs a request parameter, the parameter is sanitized rather than output directly.

New element output-stream-wrapper added in nexaweb-server.xml
This element controls synchronicity of client and server DOM processing. Default is asynchronous so that client does not wait for server DOM processing request to complete.

Two new controls added in nexaweb-client.xml

  • show-unknown-vm-status
    It is now possible to display or hide the warning message about unrecognized or untested JVM when the application starts. The default is that the warning is shown.
  • open-push-without-protocol
    This option allows finer control of push connection which defaults to establishing push connection as a singleton request without other synch information being sent. For more information, see the comment about this control in nexaweb-client.xml.

Defects Resolved (Java)

10233memory leak related to processing a file that defines dataSource multiple times
10259swing change: tabbing does not work for Sun Java Plug-in 1.3
10367security: index.jsp has cross site scripting issue
10545when using IME to input a string longer than textField width, the character being converted may not be visible
10547problem with display position for textField when IME input is longer than maxLength
10568BIO-424100 cursor placed at wrong location for textArea with autoWrap set to true
10629compatibility: compatibility issue regarding drawing processing of a window or dialog
10635backslash in texArea throws exception
10640pressing the arrow key in listBox or table without a selection item may cause NullPointerException
10653feature request: adding option for not showing the warning for unrecognized JVM in version check by JVM detector
10661feature request: adding option for ServerDOM synchronous timing
10662multithread processing by XmlAbsorptionOutputStreamSplitter causes a ServerDOM synchronous issue
10663backslash character in XPath query may cause an exception
10672multiple session support using request headers
10680cursor may display at the beginning of pasted text when pasting text into textArea
10681cursor may disappear when left arrow key is pressed repeatedly in textField with IME input
10682ServerProtocolException related to SimpleDateFormat