version 1.8.19 build 3

This is a rebuild of 1.8.19

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.19-3.el7

Fixed

• don't use cached cluster value if it's not available #748
• fix accessability of buttons in active jobs table #732

Changed

• use specific versions of packaging repo in #735

version 1.8.19

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.19-1.el7

Fixed

• don't use cached cluster value if it's not available #748
• fix accessability of buttons in active jobs table #732

Changed

• use specific versions of packaging repo in #735

version 1.8.18

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.18-1.el7

Changelog

Fixed

• Fix name of setting security_csp_frame_ancestors in example ood_portal_example.yml file

version 1.7.19

Security

• backport security fix from OnDemand 1.8
  to properly escape user input when creating job template in job composer as
  reported as CVE-2020-27958

version 1.8.17

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.17-1.el7

Changelog

Fixed

• build bin from nginx_stage gemspec which can end up placing the ruby/node/python wrappers in your PATH which causes issues #719

Changed

• replace security_disable_frames with security_csp_frame_ancestors setting that lets you set the value of this header and defaults header to servername instead of none #721

version 1.8.16

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.16-1.el7

Changelog

Fixed

• accessibility: update html titles of apps to be a little more specific to reduce ambiguity #698

Security

• properly escape user input by using Open3 capture methods #702
• by default, set Content Security Policy frame-ancestors: none for all requests, which can be disabled setting security_disable_frames: false in the ood_portal.yml #697
• by default, set HSTS if SSL is in use, which can be disabled setting security_strict_transport: false in the ood_portal.yml #697

version 1.8.15

Fixed

• replace text "XDMoD" with "Open XDMoD" in Job Composer

Version 1.8.14

Added

• log formatting options for apache and nginx access logs #677.

Changed

• Changed language to 'Open XDMoD' #687.
• Update to 5.2.4.4 and ood_core 0.14.0 #690.

Fixed

• Fixed XDMoD queries for staff users #688.

v1.8.13-2

Note: rebuilt 1.8.13 to properly build ES6 assets in production for Rails apps.

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.13-2.el7

Changelog

Changed

• make it easier to develop info.html.erb in batch connect apps by gracefully handling crashes and now rendering template from the app root instead of storing a copy of the template in the session #666

Added

• can load .rb locale files alongside .yml files #645
• warn users about job composer links to XDMoD jobs being broken immediately after job starts #676

Fixed

• ignore bad cache key values when updating from batch connect form cache #655
• properly escape characters in Go To dialog in Files app #660
• force update Files app dependencies using yarn resolutions #661
• accessibility: hide FA icons from screen readers and use real title in app link list #667
• xdmod widgets utilize available space when no motd displays #676

version 1.8.13

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.13-1.el7

Changelog

Changed

• make it easier to develop info.html.erb in batch connect apps by gracefully handling crashes and now rendering template from the app root instead of storing a copy of the template in the session #666

Added

• can load .rb locale files alongside .yml files #645
• warn users about job composer links to XDMoD jobs being broken immediately after job starts #676

Fixed

• ignore bad cache key values when updating from batch connect form cache #655
• properly escape characters in Go To dialog in Files app #660
• force update Files app dependencies using yarn resolutions #661
• accessibility: hide FA icons from screen readers and use real title in app link list #667
• xdmod widgets utilize available space when no motd displays #676