Terminalfour: 8.3.19

General

Overview

We're delighted to announce the release of 8.3.19 which includes lots of exciting improvements and fixes related to accessibility, managing content/page layouts, form builder improvements, and much more. Let's dive in...

Improved Accessibility of the platform

Based on client feedback and 3rd party accessibility audits we’ve focused on improving the accessibility of the Terminalfour Platform to ensure a better experience for all users. We take accessibility extremely seriously, and our work in this area is not complete. We’ll continue to make improvements based on user feedback and ongoing accessibility testing in subsequent releases.

Improved color contrast

RDSM-37057 and RDSM-37056

We’ve tweaked the colors used throughout the platform to ensure there’s sufficient color contrast. Button and badge colors have been darkened, labels have been made easier to read, and overall text is more legible for all users.

Improved Keyboard Navigation and Screen reader support

RDSM-37281, RDSM-37645, RDSM-37578, RDSM-37577, RDSM-37050, RDSM-37047, RDSM-36997, and RDSM-37046

For those users who require assistive technology, or who prefer keyboard navigation to pointer devices, this release improves the experience in these areas. Screen readers will now announce with more context, and keyboard navigation has improved across the board (especially within tabs and modals).

Introducing Handlebars

RDSM-37325

Handlebars offers a new way to create your Content Layouts and Page Layouts that’s more powerful than traditional T4 tags, but much more approachable than programmable layouts. Our goal is to offer the right mix of flexibility and ease-of-use and we can't wait for you to give it a try.

Handlebars allows you to create Content Layouts and Page Layouts with placeholders and simple logic that will be filled in with data at Publish time, making it easier to manage and manipulate content without needing extensive coding expertise or familiarity with the complexities of Programmable Layouts.

An “Intro to Handlebars” is available in the documentation area to show you what it’s capable of and we’d love to get your feedback.

Webhooks comes to Terminalfour

RDSM-37065

This release also introduces Webhooks to the Terminalfour platform, starting with Form Builder submissions.

From 8.3.19 you can now send form submissions to a 3rd party service automatically as soon as they’re received allowing for easier integration with other platforms.

Rather that 3rd party systems having to connect to Terminalfour to check for new submissions, we'll send them to the system of your choice as soon as submissions are received.

Webhooks can be used with no-code automation platforms such as Zapier to automatically send your form submission data wherever it makes sense for your use-case.

We’re excited to extend this webhook functionality to other areas of the product but we’d love your feedback to know where would provide the most value. Perhaps when a publish completes? Or a new Content Type, or Section is created? Let us know!

Security

This release also further bolsters the security of the Terminalfour platform in a number of areas based on feedback we've received from recurring 3rd party penetration testing as well as feedback directly from users.

User locking

RDSM-34924

For local users (i.e. those not authenticating with SSO or a 3rd party authentication service) we’ve introduced automatic user locking based on recurring failed login attempts.

If users enter an incorrect password 8 times in a row, their account will be automatically locked.

Users will be sent an email when their account is unlocked that includes a link to unlock their account and create a new password. Admins also have the ability to filter for, and unlock locked users.

Users account will automatically unlock after 24 hours.

XSS/XXE issues

We have addressed issues in the following areas:

• (XXE) Processing XML in the Data Object, Content Syncer etc RDSM-37339
• (XSS) Section Metadata RDSM-37522
• (XSS) Mediums (Users and Workflow) RDSM-32500
• (XSS) Section/Content Linking RDSM-33798
• (XSS) External Content Syncer RDSM-32501
• (XSS) Content Names in Direct Edit RDSM-37395
• (XSS) A-Z Navigation Object RDSM-30149
• (XSS) Forms (when mapped to existing content types) RDSM-36991
• (XSS) Page Layout names in channel configuration RDSM-33902

Other Improvements

• Improved error handling in Direct Edit when a page contains broken JavaScript RDSM-33909
• Redesigned Direct Edit menu bringing clearer labels and visual consistency RDSM-37535
  
• The left menu’s state will be remembered between page changes, meaning if you want to minimize the left menu – it will stay minimized! RDSM-34736
• The UI for creating access control configuration has been updated to the v8 UI RDSM-37077
  
• Improved Auto Variants behaviour: Now when you change an image in the Media library, the original auto variants will be updated with the newly uploaded image. (When upgrading to 8.3.19, existing auto-variants won't be changed until original images are updated) RDSM-30869

 

Security fixes

The following issues have been resolved in 8.3.19:

• CVE-2024-22217
• CVE-2024-22218 & CVE-2024-22219