SR-A24598 · Issue 247394
Apache Struts updated for security
Resolved in Pega Version 7.2.1
Apache Struts has been updated to version 2.3.28 to protect against potential security vulnerabilities exposed when Dynamic Method Invocation is enabled, removing the ability for remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
SR-A24787 · Issue 247535
SA mobile app hang fixed
Resolved in Pega Version 7.2.1
Hitting the 'back' button in the SA mobile app before a work-object fully loaded the master-details caused the app to hang. This was traced to an issue with the thread switching that caused a JS exception, and has been resolved.
SR-A24787 · Issue 245849
SA mobile app hang fixed
Resolved in Pega Version 7.2.1
Hitting the 'back' button in the SA mobile app before a work-object fully loaded the master-details caused the app to hang. This was traced to an issue with the thread switching that caused a JS exception, and has been resolved.
SR-A24797 · Issue 247605
Localization added to reassign statement in Audit -> History
Resolved in Pega Version 7.2.1
The Audit->History reassign statement "This assignment has been reassigned to Operator ?, as ? is unavailable" was not localized due to the string being hardcoded without using field values. Localization has been added through the newly created field value ROUTINGREASSIGNEDTOSUBSTITUE to be used in the checkForSubstitute function.
SR-A24968 · Issue 247952
Performance improvements for pyComputeSegmentLogic
Resolved in Pega Version 7.2.1
Caching and updated logic have been added to the pyComputeSegmentLogic activity to improve performance.
SR-A27900 · Issue 248758
24-hour clock enhancement for displayReportSection
Resolved in Pega Version 7.2.1
The new option "Support 24 hour format for time?" has been added to displayReportSection to allow the date/time in the Charts 'Show Data' display screen to use a 24-Hr format.
SR-A27978 · Issue 248681
"Grand Total" localized
Resolved in Pega Version 7.2.1
Localization has been added for the pyFieldCaption property "Grand Total" .
SR-A4613 · Issue 227870
Updated logging for "Obfuscated URL tampering" errors
Resolved in Pega Version 7.2.1
The error "pegarules.util.URLObfuscation) ERROR - Obfuscated URL tampering - unable to derive cleartext data" was being logged when the "cookie/HttpOnly" parameter was set. This was traced to the unobfuscating of data failing at the server end, and the loggers have been updated to print requestor data for better diagnostics.
SR-A4719 · Issue 230767
Fixed improper ID carryover after reset all loggers
Resolved in Pega Version 7.2.1
When a user reset the logs, the same user ID was then being populated in the log entries of master agent and requestor lock exceptions from that point on even when the exceptions were from other users. This was due to the username not being cleared correctly after the reset all loggers operation is done, and to fix this, the reset all loggers functionality has been changed such that no data from main thread is copied onto the child thread(the dispatcher thread).
SR-A5733 · Issue 235301
Excel editing fixed for delegated data tables
Resolved in Pega Version 7.2.1
An error was generated when attempting 'edit in Excel' on a delegated data table. This was due to an import/export error linked to a visibility condition, and has been corrected.