ISL Conference Proxy 4.4.1917.81 with modules for Windows and Linux (2019-09-12)
On 12th of September the following was released:
- ISL Conference Proxy 4.4.1917.81 for Windows 32bit (Platform=win32, Revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12, req_os_version=0x06000000-0x7fffffff)
- ISL Conference Proxy 4.4.1917.81 for for Windows 64bit (Platform=win64, Revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12, req_os_version=0x06000000-0x7fffffff)
- ISL Conference Proxy 4.4.1917.81 for for Linux 32bit (Platform=linux, Revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12, req_os_version=0x0206170000-0xffffffffff)
- ISL Conference Proxy 4.4.1917.81 for for Linux 64bit (Platform=linux64, Revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12, req_os_version=0x0206170000-0xffffffffff)
Modules
- Backup 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- Core Login 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- DNS 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- GeoIP 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- ISL AlwaysOn 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- ISL Groop 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- ISL Light 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- ISL Pronto 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- Reports 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- Storage 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
- System Monitor 4.4.1917.81 (revision=3dc46b9565c55031b578bfd5d6c80cdcb5c2c0f1, release_date=2019-09-12)
Translations
- backup_20190909_20190909_145927.translation
- core_login_20190909_20190909_145927.translation
- isl_alwayson_20190909_20190909_145927.translation
- isl_conference_proxy_20190909_20190909_145927.translation
- isl_groop_20190909_20190909_145927.translation
- isl_light_20190909_20190909_145927.translation
- isl_pronto_20190909_20190909_145927.translation
- reports_20190909_20190909_145927.translation
Update availability
All updates, except translations, have release date set to 2019-09-12. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.
Upgrading to new version
This are server side updates so hosted service users do not need to do anything.
Server license users please check Upgrading Server License
Improvements
Description
New HTTP response headers were added: X-XSS-Protection: 0, X-Content-Type-Options: nosniff, Referrer-Policy: same-origin, Strict-Transport-Security (must be set by administrator), Public-Key-Pins (must be set by administrator).
Description
URL query parameters, such as "CPSESSID" and "post_token" are now sanitized in URLs.
Description
When starting actions, first check of operating system version is performed.
Description
New hag was added when unknown computer registers and module error notification was removed.
Description
Due to changes in css files, appearance of main navigation bar has changed. Text is now displayed in bold font. Also look of corresponding dropdown has changed.
Description
Number of tries to lock a folder when a folder cannot be locked (no privileges or already locked) is now limited.
Description
Dynamic program chooser on "/users/programs" was replaced with a simpler program list. By default, the program list is not accessible and "/users/programs" will just redirect to "/users/main/downloads.html".
Description
Counters dump (dump command in "Logs > Counter settings") is now implemented in AKV format. Output is limited to 100 counters per log line, multiple lines will be logged if there are more. Counter output name (set by "[name]" in setting) is converted to AKV format:
- AKV key must match:
[A-Z][A-Z0-9]{0,15}_[A-Z][A-Z0-9]{0,15}_L
- ':' and '_' are used to find the scope, otherwise "CNT_" will be used as scope
- lowercase letters are uppercased
- numbers are passed through except the first character
- other characters are stripped out
- length is limited to <16 characters>_<16 characters>_L
Description
Setting "Web server > Report web server internal errors" is now Yes by default (previously No).
Description
ISL Conference proxy now exposes list of grid calls and signals it can handle. Grid calls/signals are registered at start time and when a feature flag is enabled.
Description
Panic handling and logs were improved. CP-POST-TOKEN was added for CSRF protection.
Description
"Client hostname", "Desk hostname", "Client MAC address" and "Desk MAC address" were added to ISL Light report pages. In case where values extend table, entire value is shown in tooltip.
Description
dns_name function in dns module was re-implemented and optimized.
Description
load_balance function in ICP was improved with additional cache. Function load_balance calculates the score for each server and than returns sorted list based on score.
Description
New webapi2 method utils/login/2 was added, where captcha is enabled by default.
Description
Regexp structure and string functions were optimized.
Description
Part of our network stack that handles address resolving was refactored so it does not use exceptions any more. Performance of our network stack was improved.
Description
Destringify function was replaced with simpler function.
Description
Unnecessary work in resolve_geoip function in geoip module was removed, simple version of resolve_geoip to be used in lb functions geoip module was prepared and query for country and city in lb functions in core were removed.
Description
New log keys were added to WebSocket log lines:
- HTTP_ORIGIN: root URL where WebSocket was opened
- HTTP_USERAGENT: web browser
New log keys were added to WebSocket HTTP-emulation log lines:
- HTTP_REFERRER: URL where WebSocket HTTP-emulation was opened
- HTTP_USERAGENT: web browser
Severity for errors was lowered to error by default. Error will be reported as critical if:
- client address is in intranet, or
- hostname in HTTP Host header matches Referer/Origin header and ICP recognizes the hostname as one of its own domains (from license, DNS zone, etc.)
Description
"Download URLs" section was added to /users/programs. "Download URLs" will be present only when a valid name is selected.
Description
If URL query parameter "_output" is present in /users/programs, 404 will be returned. Previously:
- if /users/programs is enabled in web admin Security: _output is ignored, returns simply 200 HTML page
- if /users/programs is disabled in web admin Security: _output is ignored, returns redirect 303 /users/main/downloads.html
Description
ICP now reads actions with interface version 2. new actions must include supported os_version range.
Description
"Administrator account" was changed to "Administrator account (user will only be able to access configuration page)" in /conf create user.
Description
Packet generate state transition now reports times for state transitions (+0ms is omitted).
Description
Program query parameters are now sanitized to prevent potential security risks. URL and Referrer fields in HTTP server logs and "Web hits" are sanitized. Also Packet generator warnings and errors are sanitized.
Description
"Desk MAC address" and "Client MAC address" are now exposed in ISL Light session metadata. In case when newer programs are used, also "Desk hostname" and "Client hostname" are shown in metadata.
Description
Registered new webapi2 method isllight/session/info/3. Method has same functionality as isllight/session/info/2 but it will also return following fields:
- deskHostname
- clientHostname
- deskMacAddresses
- clientMacAddresses
Description
Value of path to static files is now passed to template interpreter as a variable.
Description
New integration setting was added to web administration: ISL Pronto > Show warning when closing chat with client still present (default: Yes). When set to yes, and supporter closes chat while client is still in chat, confirmation popup is shown to prevent accidental closes.
Description
In previous version SMTP settings were shown as empty in "Configuration/General" even if user already entered them in Basic section. Clicking save in such state deleted SMTP settings. This was now redesigned so ICP now shows correct SMTP settings.
The defect was fixed.
Description
In previous version ISL AlwaysOn migrate webapi2 call resulted in unhanded exception when user parameter was empty or backslash. This was now redesigned and user error is returned instead.
The defect was fixed.
Description
In previous versions user had to click on a link to perform re-login after successfully configuring 2-step verification. Call to action has been moved from link to Login button to simplify the GUI.
The defect was fixed.
Description
In previous version CoreLogin module performed call utils/logout/1 webapi to perform logout. However, this call did not reset the cookie. This was now redesigned so that CoreLogin performs a get request to users/main/logout with post token, and this request will also reset the cookie and consequently it will also redirect user to login screen.
The defect was fixed.
Description
In previous version, when user specified gateway address and port for wol packet, ICP was not able to parse gateway and only proxy computers were used for sending wol packets. This was now redesigned so ICP correctly parses the resulting address and port pair and sends wol packet.
The defect was fixed.
Description
In previous version, Backup module contained invalid html code. This was now redesigned by removing redundant and wrong tags.
The defect was fixed.
Description
In previous version, wrong operating system version was shown in system stats for Windows machines. This was now redesigned, so that correct version is shown.
The defect was fixed.
Description
In previous version some of errors were not handled and logged correctly. This has now been redesigned and errors should be correctly handled and logged.
The defect was fixed.
Description
File backup restore will fail in Online update when the version of ICP to be restored is the same as installed version. This was redesigned and already installed version of ICP is properly detected as no change.
The defect was fixed.
Description
In previous version, all backups jobs, that do not have time_finished in backup_history table are treated as active. When ICP is restared when there is some backup running, after restart, that backup will be shown as active and spinner will spin forever. This was now redesigned, so on start of Backup Module, all active backups are marked as finished, with ISL Conference Proxy restarted error.
The defect was fixed.
Description
In previous version, when invalid value was given as custom parameter to listing locations/history, error "invalid input for listing locations" was shown and no locations/history were listed. This was now redesigned and fallback to default values is used.
The defect was fixed.
Description
In previous version, during transfer of isljson element in our network stack utf16 surrogates might be lost. This was now redesigned.
The defect was fixed.
Description
Following log lines have been improved:
- login dialog key LOGINDLG_VAR_USER_ID changed to LOGINDLG_VARUSER_ID
- analytics APP_CRASHRAW_TXT was split in 1024 byte log lines (limited to 64 lines = 64kb)
- Core Login wrong code duplicate EXC_DESC_TXT was removed
The defect was fixed.
Description
Programs query that caused 404 HTTP error was removed.
The defect was fixed.
Description
In previous versions, when killing session ISL Light and ISL LightDesk will show misleading message. This was now redesigned so that correct message is shown.
The defect was fixed.
Description
In some cases servers could get caught in a JSON patching feedback loop. To prevent this patching protocol has been extended with new message types.
The defect was fixed.
Description
In case of deleted content islpronto/chat/content/get/single/1 webapi returned null which caused error on chat_transcript.html page.
The defect was fixed.
Description
In some cases ISL Pronto module could trigger a deadlock due to invalid memindex_mt iteration. Iteration has been deprecated and replaced with a callback implementation which should prevent any further deadlocks.
The defect was fixed.
Description
In previous versions csid was never cleared from session storage which caused continually calling islpronto/client/session/update/single/1 webapi. This was now redesigned and csid is cleared from session storage.
The defect was fixed.
Description
In previous versions chat transcripts sent via islpronto/client/chat/transcript/send/1 were sent with timestamps in UTC timezone, because clients timezone was never stored in DB. This was now redesigned so that chat transcript is sent with timestamps in clients timezone.
The defect was fixed.