Highlights of Cascade Server 6.0.3

Cascade version 6.0.3 is a bug-fix and minor improvement release. It includes fixes for two security issues -- a Cross-Site Scripting (XSS) and a Cross-Site Request Forgery (CSRF) vulnerability -- along with other bug-fixes and minor improvements.

It is a recommended upgrade for users running the 6.0.x series.

Issues Resolved in 6.0.3

Bug

• [CSCD-4080] - Contributors unable to delete assets to which they have write access even if no workflow is required
• [CSCD-4587] - Folders will not inherit workflows from parent if parent option is set to 'Do not inherit'
• [CSCD-4746] - Single quotes in default region can cause spell checker to throw error
• [CSCD-4807] - Increase length of CSS Classes field
• [CSCD-4897] - Submitting a template with multiple default regions does not forward you back to the edit screen
• [CSCD-4915] - Can't easily remove any configuration files from the system
• [CSCD-5309] - Web Services: Creating a file using 'data' property leads to 0 byte file asset
• [CSCD-5388] - sitedestinationcontainer is not one of the entityTypeString in WSDL
• [CSCD-5525] - Site Migration Fails with a Null Pointer Exception when it reaches destinations with no transport set
• [CSCD-5626] - XSS vulnerability in search action when query contains non-terminated phrases
• [CSCD-5627] - CSRF vulnerability in search action when search query contains non-terminated phrases
• [CSCD-5631] - Align dropdown arrow for quick links with top of line rather than bottom

Improvement

• [CSCD-4817] - Content type index block rendering should use database to sort pages and limit the results
• [CSCD-5623] - Add a "Give us Feedback" link to the Success community idea exchange

Upgrading from 6.0.x to 6.0.3

• The Cascade Server WSDL has changed with the release of 6.0.3.  It is recommended that all Web Services scripts be tested in a non-production environment before applying the upgrade to production.  Java web services scripts written using Axis should be recompiled against the latest WSDL.

Please follow every available release Upgrade Guide for every version you skipped during the upgrade.