236 results found
-
Set a default time zone for date/time editing
Currently in the CMS, time/date pickers are associated to the editors local time. This is problematic, because we have editors all over the US. Entering in time/date information incorrectly will lead to our event registration announcements displaying the wrong time.
For example, our servers are set to Central Standard Time, so we display date/times, we need to assume they were entered in as that time zone as well, or the time will be off.
Ideally we should be able to force the date/time picker to use the same time zone as the server.10 votes -
EPiServer.Forms.Samples uses out of data JQuery.UI with known vulnerabilities
One of our customers is using the EPiServer.Forms.Samples library, mostly to facilitate content gating with the Forms Visitor Groups. During a recent penetration test the following was reported:
We also observed the use of a known vulnerable version of jquery-ui at /Util/EPiServer.Forms.Samples/jquery-ui/jquery-ui.js which is known to have the following vulnerabilities
CVE-2022-31160 (https://nvd.nist.gov/vuln/detail/CVE-2022-31160 : XSS when refreshing a checkboxradio with an HTML-like initial text label
Recommendation
Use the latest versions of the dependencies where possible. If it is not possible to update these, ensure the vulnerable components are not used.
There does not appear to be an equivalent of the…3 votes -
Create a publicly available symbols server for Episerver Libraries
Hello,
I recently found through some of my searches on the internet that a symbols server for Episerver libraries did existed in the past. The URL I found so far is the following: http://symbols.episerver.com, but it doesn't seems to be working anymore.
It would be interested to have it back online and working, so we could leverage these pdb file to ease our debugging sessions as developers.
Thank you!
David17 votes -
Parameters for scheduled jobs in Net 5/6
As a admin I would like to be able to add parameters for my scheduled jobs so I can make configurable certain actions within the scheduled jobs.
In full framework there is a popular addon that does this.
https://github.com/Geta/Geta.ScheduledParameterJob33 votes -
Language codes in page tree (navigation and in page header menu are not the same
If you in admin change the "Web Address Prefix" for languages the editor interface uses different language codes in different locations. In the page tree navigation it uses the language code but on the page header of the page the "Web Address Prefix" is used.
This confuses the editors. See attachments.3 votes -
Add all the current .NET cultures to the CMS languages list
For example: We need to add the culture en-ES for a customer. It exists as a valid culture in .NET but is not available to select as a language in the CMS.
(In our setup it is not an option to use the default en language code for English on the spanish site.4 votes -
As an editor, I'd like navigate to page associated to "For this Page" asset folder
When editing a content object located in "For this X" asset folder I would like to find/navigate to the X content.
This can be solved by adding a link in the "For this X" breadcrumb.11 votes -
Improve user experience for editors when switching from one site to another
At the moment, when a logged in editor switches from one site (Site A to another (Site B, where she/he has access to, the user is forced to re-log-in to Site B, and the entire CMS is re-loaded, which takes a long time. The current user experience is less than ideal. The customer raising this feedback has about 50 primary websites, with a total of 150 sub-sites.
13 votes -
Remove multiple items in Content Area in one go
You can select multiple blocks, images and products from the asset pane (ctrl + click or shift + click and drag them into the Content Area. However, there is no way of doing the same thing if you want to remove them from the Contet Area. This is often the case for commerce customers that add 100 products to a campaign page and want to remove them some time after. Attached video shows CMS 11 but its the same for CMS 12.
2 votes -
Add customizable reporting framework to CMS 12
As a developer I want to create custom reports (like in CMS pre-v12. Then I want them listed on the Reports tab so users (with proper access rights can be viewed or downloaded.
10 votes -
Task async/await support for scheduled jobs
The scheduled jobs are executed as tasks by the scheduled job executor (IScheduledJobExecutor. However the Execute method that is required to create and run a custom job does not support return type Task or Task<T> and therefore the async/await syntax cannot be used. When performing expensive procedures such as reading files or executing web requests the thread is kept busy as a result. Also as far as I'm aware if I need to call an async function/method in the job then a workaround has to be used. An example of how others do this can be seen in this forum…
35 votes -
Dark mode theme
The CMS UI is mostly white, which can be straining on the eyes. I'm convinced that adding the option to switch to a dark themed interface would be greatly appreciated by a lot of users. The option could also be automatically configured based on browser preferences.
"Dark mode all the things" MKBHD
https://twitter.com/mkbhd/status/1048234335088852994?lang=en28 votes -
Unable to Delete a Block that with the 'not used anywhere' message
There are blocks that have the message 'not used anywhere' at the top. They were incorrectly created and need to be deleted. But from the offending block's edit URL, we're unable to find the Parent Block/Folder it was created under.
We're needing a 'link' that takes you directly to the Parent of this block. Otherwise, I can't easily delete the block.6 votes -
Exclude the hostnames in manage websites when using PaaS Portal to copy database and blobs between environments
For CMS customers that need to copy database and blobs using PaaS Portal, the environment-specific web hostnames (Admin > Config tab > Manage Websites become overwritten. Therefore, users wishing to view content in the preproduction system are routed over to production until the admin puts all the pre-production hostnames back into the system.
17 votes -
Web page listing security bulletins for Optimizely products
We would like a single point of truth for identified security issues so that we can support our clients.
Ideally this would include affected products/versions as well as suggested patches or remedies.
Ideally this would include all Optimizely products, not just CMS or Commerce.16 votes -
Custom cultures in DXP
We are facing an issue with non-existing english language cultures for local markets. Ex en-IT. We would like the possibility to add custom cultures in DXP with CMS 12.
12 votes -
Default time zone should be changeable
Default time zone should be CET instead of UTC for CMS in Preproduction/Production
2 votes -
Bypass approval sequence for admins
As an administrator I'd like to be able to publish content bypassing the approval sequence. Can there be a feature added to say which roles a particular approval sequence must follow?
24 votes -
Support for Static IP address
When we (as an Optimizely DXP customer expose APIs for partner vendors to invoke, including the Optimizely DXP, we need to ensure that we meet The Group's security standards and one of the many facets to this is IP whitelisting.
This means we don't allow just any IP address to invoke our API. We have a firewall that implements a check on the incoming IP address(es and only allow ones that we know of.
It is a problem if the Optimizely DXP cannot provide us with persistent IP address ranges that we can whitelist on our side. We don't want…5 votes -
Make EpiServer Forms compatible with Content Security Policy (without 'unsafe-*'
Content Security Policy (CSP (https://developer.mozilla.org/en-US/docs/Glossary/CSP is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS (https://developer.mozilla.org/en-US/docs/Glossary/XSS and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware.
Current version of EpiServer Forms is not compatible with Content Security Policy (without 'unsafe-*'.
This requires us to change EpiServer Form Element to follow directives from our IT-Security apartment.
Please remove/replace all inline CSS and Javascript required to run EpiServer Forms.
Documentation:
https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src35 votes
- Don't see your idea?