Release Notes for Mindbreeze InSpire
Version 20.3

Innovations and new features

New file manager

A new file manager in the Management Center makes it easy to view and edit (with syntax highlighting), upload and download files. Among other things, log files can be observed and examined more closely using search and filter functions.

This new file manager also provides increased security by using modern web standards.

Link to the documentation

Cross-Origin Resource Sharing (CORS)

API requests of the Mindbreeze client are now sent by default via browser-native AJAX requests. These are authorized across domains and sites using Cross-Origin Resource Sharing (CORS). This way the Mindbreeze client now supports security standards, such as the X-frame restrictions to prevent clickjacking attacks. In addition, the ClientService can be fine-grained to restrict from which source pages requests are allowed, in order to only unlock trusted domains.

Link to the documentation

Extended Connectors

Data Integration Connector supports ZIP Talend Jobs

The Data Integration Connector now directly supports the configuration of an exported Talend Job ZIP file. This simplifies the setup, as the ZIP file no longer needs to be extracted.

With the configuration option "Path to Job" the ZIP or the extracted job can be specified.

Link to the documentation

Jira Connector extended Delta Crawling

The Jira Connector now supports efficient delta crawling for Jira issues with active permissions. This significantly improves the delta-crawl time of documents in large installations.

This can be activated with the configuration option "Enable Issue Delta Crawling".

Link to the documentation

Microsoft SharePoint Connector

Optionally, the Microsoft SharePoint Connector can now use the latest published version of draft documents for indexing metadata and content. This functionality requires a newer version of the Mindbreeze SharePoint API extensions, which are available on the website.

Link to the documentation

Microsoft Dynamics CRM Online Connector

In this version, the Microsoft Dynamics CRM Connector now also supports the connection of Microsoft Dynamics CRM Online.

This can be configured with the "Is Microsoft Dynamics CRM Online" configuration option.

Link to the documentation

Technical extensions

User login using Cognito JWT token

Users who are managed in a Cognito IDP user pool can now log on directly to the ClientService using a JWT token. Among other things, this enables the seamless integration of Mindbreeze Search apps into web apps with Cognito user login.

Link to the documentation

Encrypted InSpire Snapshots

To improve data security, the contents of Snapshot archives are encrypted. Snapshots can thus be stored outside the InSpire appliance without any security risk.

Link to the documentation

Security relevant changes

• OpenJDK Security Update 8u252 (Important) : CVE-2020-2754, CVE-2020-2755, CVE-2020-2756, CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800, CVE-2020-2803, CVE-2020-2805, CVE-2020-2830
• CentOS 6 Kernel Update: CVE-2020-10711, CVE-2017-12192
• Remove unused apache-commons-fileupload.jar: CVE-2013-0248
• Update Atomic Host to 7.2006: CVE-2019-14816,CVE-2019-14895,CVE-2019-14898,CVE-2019-14901,CVE-2019-17133,CVE-2018-18751,CVE-2019-9924,CVE-2015-2716,CVE-2019-15605,CVE-2019-11487,CVE-2019-17666,CVE-2019-19338,CVE-2019-14821,CVE-2019-15239,CVE-2020-12888,CVE-2020-8616,CVE-2020-8617,CVE-2017-6519,CVE-2018-20852,CVE-2019-16056,CVE-2019-10197,CVE-2019-10218,CVE-2018-5745,CVE-2019-6465,CVE-2019-6477,CVE-2018-4180,CVE-2018-4181,CVE-2018-4700,CVE-2018-10360,CVE-2019-3820,CVE-2019-5436,CVE-2020-10531,CVE-2019-18634,CVE-2019-13734,CVE-2019-18408,CVE-2019-11729,CVE-2019-11745
• Management Center sets SameSite Cookie attribute to Strict to prevent CSRF attacks
• Fix for: SAML AssertionFilter resolves external entities when the assertion is read from the header

Additional changes

• Fix for: SharePoint Online Principal Resolution Service: Graph groups cannot be resolved without email address
• SharePoint Online Connector: Added option to continuously update the crawler status during the crawl run
• Fix for: SharePoint Online of the Principal Resolution Service: Graph does not retrieve all users
• SharePoint Online Connector: Supports paging for API calls
• Fix for: SharePoint Online Principal Resolution Service: "everyone" container not created
• SharePoint Online Principal Resolution Service: Can now resolve Office 365 groups via graph
• SharePoint Online Connector: Improved logging
• Fix for: Export: Add column in Firefox can lead to autocomplete window that never closes.
• Search App - Change the default date format of the Date Range Picker.
• Fix for: Tasks: If a task is disabled, it can not be executed with "Run now", because the new task is also disabled.
• Fix for: /exportAsync returns status.code 404 on error
• Use of tools (Query Logs Reporting, Query Performance Tester) for SaaS environment behind Loadbalancer on Master Service
• Adding rsyslog-gnutls to the InSpire container
• PrincipalResolution Service: Case-insensitive option
• Improved crawler status handling
• Microsoft File supports Trustee Security Model (Novell Open Enterprise)
• Fix for: Identity Conversion Service "ReplacementConversion" too verbose logging
• Fix for: SharePoint Connector: Track Document URL Changes no longer works
• Robustification ISHMED crawler
• Microsoft File: Delete expired DFS-referal entries
• Fix for: Filesystem Crawler Full Traversal Timestamp does not work in CentOS 6
• Fix for: LDAP Cache: "Clean cache after each N updates" deletes the cache without rebuilding it
• IBM Lotus Notes Connector: Cache supports multiple directory databases in directory assistance scenarios
• CSVMapping Item Transformer is available
• Nodes: config.json is only rewritten if the message changes.
• Synchronous Excel Export
• Performance improvement for Collected Favorites
• PDFviewer is opened with the postMessage to pass headers and arguments to the transport
• Fix for: asyncExport fallback on synchronous export does not work.
• Support for Mindbreeze plugins using Python3
• Fix for: Synthesized property `concat(exp1, exp2)` returns empty string
• mesindexclient tool to retrieve or update metadata from the index
• Fix for: SynonymTransformer does not update the effective search request which leads to missing highlighting
• Configurable timeout for ItemTransformer Request in the DocumentInverter
• Fix for: pragma nocache header is never set in additionals contexts
• Configurable Bind address for the ClientService
• SameSite cookie values are configurable in ClientService
• Fix für: Talend ClassNotFoundException: org.apache.xmlbeans.impl.common.ReaderInputStream
• Fix für: Egnyte Crawl Abbruch nach NullPointerException nach Meldung: Not fetching too large content of document
• Removal of https://myappliance/config
• Fix for: Jira: NullPointerExceptions in Converter
• Fix for: Rounding at Estimated Count is wrong - Filtercount is lower than Estimated Count of search
• Fix for: Query Performance Tester: User selection also depends on iteration number.
• QueryExpr Transformation: Transforming nonexpanable query expressions
• Fix for: PersonalizedRelevanceTransformer refresh is not successful if there are empty keys in the DB during actions
• Update Tomcat to 8.5.53