WP 1.10

Software version: WP 1.10

Scheduled release date:   

This file provides information about the VERA Web Portal

  • Version Information
  • Resolved Issues
  • New Features
  • Docker Image Information
  • Known Issues and Limitations

Version Information

High-level VERA Version2021.4
Web Portal Version1.10

Software Build

(Can be verified on the "Versions" screen in the web portal.)

298

(2021/12/27)

Resolved Issues

KeySummaryNotes
VS-997Cannot save updated user information until switching cursor focusFixed the user profile page so that the Save button is available without focusing on other fields.
VS-1039Web portal is vulnerable to Cross Frame Spoofing (CFS)

Fixed an issue to prevent the web portal from being opened in an iframe, which will prevent third-party scripts from running in both Internet Explorer and popular browsers.

VS-1072Filter and Refresh icons disappear when selectedFixed an issue where the Filter and Refresh icons disappear when selected but not hovered on for tables.
VS-1086Error message not displayed when attempting to add a project to a second domainFixed an issue where an error message was not being displayed when an admin attemted to add a project to more than one domain.
VS-1096Approval Queue does not load when user is in domain with project containing special characterFixed an issue with retrieving fields from the database which include special characters for regex.
VS-1252All buttons are greyed out after adding a project to a domain

Fixed an issue where all buttons were disabled after adding a project to a domain.

VS-1260VERA timeout when trying to approve +125 tasks in the approval queueAdded a progress bar for approving many entities at the same time from the Approval Queue.
VS-1262Routing Test Execution for Approval fails if test has Xray custom test step fieldsFixed an issue with Test Execution route will fail if test has any of these custom test step fields.
VS-1281User should not be allowed to login from unsupported browserProhibited the use of the portal from Internet Explorer.
VS-1282VERA Admin is unable to set user to None for Identity ProviderResolved an issue where the user can`t set user to None for Identity Provider.
VS-1337Web Portal is vulnerable to HTML injection attacks

Implemented sanitize feature on all incoming data (using third-party library sanitize-html).

VS-1351Inconsistent display of qTest steps in VERA for test cases imported from ExcelResolved by VS-1337
VS-1338Web Portal returns an HTTP 500 status code when User-Agent header is missingFixed an issue when GET request without "User-Agent" header returned HTTP status code 500.
VS-1353Approving issues opened in separate tabs approves last issue opened

Fixed an issue where when assignedTask was defined at the beginning of the load function, which caused an incorrect approval (wrong assigned Task) when many tabs were open.

VS-1404VERA Signature ID is displaying in Reviewer field instead of full name and system nameFixed an issue when the first task is being returned without processing the rest of the tasks in the taskgroup therefore secondary tasks are returning the VERA signature ID without going through the rest of the processing to convert it to the expected full name and system name.
VS-1421Revision History is not numerically sortedFixed an issue in VERA where the Revision History was not sorted correctly numerically (descending).
VS-1439Issue with special characters in qTest attachment namesFixed handling of attachments with special characters in the filenames.
VS-1440VERA relies solely on file extensions to recognize media typesVERA was using only the file extension and used content-type and file extension together to display image attachments. VERA can display images that don't have a file extension (mostly pasted screenshots).

New Features

KeySummaryNotes
VS-347Administrator can configure the minimum required length of passwordsAdded the ability for an administrator to configure the minimum required length of passwords.
VS-348Administrator can configure the minimum required password complexity ruleAdded the ability for an administrator to configure the minimum required complexity of user passwords.
VS-856Remove the Approval Queue feature toggleApproval Queue no longer need to be explicitly enabled/disabled when the feature is or is not wanted.
VS-857Remove the VERA Domains feature toggleVERA Domains feature no longer needs to be explicitly enabled/disabled when the feature is or is not wanted. 
VS-1219The author does not see approval links on the details page for records they authoredAdded the ability to prevent users from seeing approval links on the details page for records they authored (when author exclusion is enabled).
VS-1296System enforces configured minimum required password complexity rulesAdded the ability for an administrator to configure the minimum required complexity of user passwords.
VS-1367SAML Password Auth Context should be configurableAdded a method to configure the Password Auth Context instead of hardcoding the 1.0 Password Auth Context.
VS-1385Ability to display Author in VERA Record Added Author field in Activity History and Print View of the VERA Record when author exclusion is enabled.
VS-1417System enforce the minimum required length of passwordsAdded the ability for an administrator to enforce the minimum required length of passwords.
VS-1500Update compatibility for WPUpdated compatibility to support multiple authors in author exclusion feature.

Docker

Repositoryveraserver20190209075900.azurecr.io/tx3/vera-web-portal
Tags
  • 2021.4
  • v2021.4
  • 1.10.0
How to UpgradeSee Upgrade the VERA Server Applications for instructions


Known Issues and Limitations

KeySummaryKnown Issue Details
VS-447User Administrator role can see Signature Verification Failure Report and Re-verifyA User Administrator can access the Signature Verification reporting section of the Administration Portal.  This feature should be limited to System Administrators.
VS-810Admin can't remove a project from domain if project name contains regexA project created with regex characters cannot be removed from a domain once it is added. This also causes issues with displaying tasks in the approval queue for a user
VS-858Import User modal/page does not display a confirmation when a file is uploadedNo confirmation is displayed following the upload of a user import.
VS-859An Admin cannot blank a user's email addressAn administrative user cannot update a user to have no email address. This is due to validation on the submitted changes for a user requiring an email address.
VS-1065A misleading error message is displayed when VERA cannot apply a final approvalVERA will display a misleading error message when it fails to transition a Jira issue in the workflow.  The error message displayed to the user will indicate that there is a connectivity problem, even if it's actually a configuration problem. 
VS-1279Clicking the Import Button on the user import modal without first selecting a file causes the form to breakThe Import user form buttons are disabled, but nothing happens and the page has to be refreshed when clicking the Import Button on the user import modal without first selecting a file.
VS-1324Unusual Admin session time outWhen the admin session times out initially (after 20 min), the web portal is supposed to use the refresh token to get another valid token.
VS-1391Revision is blank in qTest Run Record Details for History entriesThe Revision field is blank for qTest Test Run records in the Record Details for a History entry.
VS-1425Text in html tag format is not displayed in VERA record name fieldTest name with text in html tag format will omit the "tagged" text in VERA record name field
VS-1426Text in html tag format is not displayed in VERA Domain or Description fieldIn VERA, text in html tag format is not displayed in VERA Domain or Description field.
VS-1427Text in html tag format is not displayed in VERA Full Name fieldIn VERA, Text in html tag format is not displayed in VERA Full Name field.