49 results found
-
Make EpiServer Forms compatible with Content Security Policy (without 'unsafe-*'
Content Security Policy (CSP (https://developer.mozilla.org/en-US/docs/Glossary/CSP is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS (https://developer.mozilla.org/en-US/docs/Glossary/XSS and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware.
Current version of EpiServer Forms is not compatible with Content Security Policy (without 'unsafe-*'.
This requires us to change EpiServer Form Element to follow directives from our IT-Security apartment.
Please remove/replace all inline CSS and Javascript required to run EpiServer Forms.
Documentation:
https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src34 votes -
Parameters for scheduled jobs in Net 5/6
As a admin I would like to be able to add parameters for my scheduled jobs so I can make configurable certain actions within the scheduled jobs.
In full framework there is a popular addon that does this.
https://github.com/Geta/Geta.ScheduledParameterJob33 votes -
Enable drag and drop for PropertyList<T> in the editing experience
Would it be possible to enable drag & drop in the editing experience of property list similar to content areas.
PropertyList are sometime favored in content type architecture as they take less editorial time to setup then blocks.33 votes -
Task async/await support for scheduled jobs
The scheduled jobs are executed as tasks by the scheduled job executor (IScheduledJobExecutor. However the Execute method that is required to create and run a custom job does not support return type Task or Task<T> and therefore the async/await syntax cannot be used. When performing expensive procedures such as reading files or executing web requests the thread is kept busy as a result. Also as far as I'm aware if I need to call an async function/method in the job then a workaround has to be used. An example of how others do this can be seen in this forum…
30 votes -
Unable to move multiple pages into hierarchy tree
We found the CMS system doesn't allow you to move multiple pages into the hierarchy tree, the only way is to move them one by one, which is very tedious and time-consuming. The only way is to write a custom class and archive them based on date creation and that's not the result we want either.
28 votes -
Ability to change master language of page & block
We have multiple times seen and gotten feedback from customers that they've accidentally created content in the wrong language when for example English is supposed to be the master language.
This is usually due to them mainly working in one language and don't switch language branch just to create a page in English.
We have a few CMS instances where we use fallback language and a navigation with mixed language context. Once a piece of content has been created with a master language other than the intended master language (English it becomes confusing and a frustrating task for editors to…26 votes -
Support CSP with nonce in Edit, Admin etc
It would be great if developers can configure CSP to use nonce. So that they can increase the security and control of what resources are loaded by the application.
Currently almost all script tags are rendered without CSP nonces and the site is broken because the browser refused to execute the script.25 votes -
Dark mode theme
The CMS UI is mostly white, which can be straining on the eyes. I'm convinced that adding the option to switch to a dark themed interface would be greatly appreciated by a lot of users. The option could also be automatically configured based on browser preferences.
"Dark mode all the things" MKBHD
https://twitter.com/mkbhd/status/1048234335088852994?lang=en25 votes -
Export Reports
As an admin I want to be able to export a report from the reports system So that I can distribute required updates to the broader author group. The outcome is the ability to complete an export of any report within the reports system
23 votes -
Support .NET 8 Blazor SSR and Razor components as templates for pages and blocks
From .NET 8 Preview 3 we see a lot of the upcoming new third Blazor mode: Blazor SSR
https://github.com/dotnet/aspnetcore/tree/main/src/Components/Samples/BlazorUnitedApp
https://devblogs.microsoft.com/dotnet/asp-net-core-updates-in-dotnet-8-preview-3/#server-side-rendering-with-blazor-components
This mode can handle traditional request/response and will also handle form posts with model binding where everything is server-rendered.
Looks very likely that this will quite quickly start replacing MVC and Razor Pages for new ASP.NET web apps since people will want to be in the nice Blazor component model.
Blazor SSR also seems like it will work great with other clientside options (any JS framework or approaches like htmx, Hotwired.dev etc so we are not restricted to only go…22 votes -
Being able to delete/move to trash orphaned blocks and media
As an editor I would like to be able to remove/move to trash a block or a media content item from the property view in the CMS.
As it is now you need to have the Block or Media widget open, and if a piece of content is orphaned you don't see it in any list.
I would like there to be a delete and move option the "Tools" dialog (See attached screenshot.
A alternative solution would be to have a automated "Orphaned" folder in the block/media view so you can actually select the delete option from there.22 votes -
Create a publicly available symbols server for Episerver Libraries
Hello,
I recently found through some of my searches on the internet that a symbols server for Episerver libraries did existed in the past. The URL I found so far is the following: http://symbols.episerver.com, but it doesn't seems to be working anymore.
It would be interested to have it back online and working, so we could leverage these pdb file to ease our debugging sessions as developers.
Thank you!
David17 votes -
Web page listing security bulletins for Optimizely products
We would like a single point of truth for identified security issues so that we can support our clients.
Ideally this would include affected products/versions as well as suggested patches or remedies.
Ideally this would include all Optimizely products, not just CMS or Commerce.16 votes -
Bypass approval sequence for admins
As an administrator I'd like to be able to publish content bypassing the approval sequence. Can there be a feature added to say which roles a particular approval sequence must follow?
15 votes -
HSTS on the root domain
We are experiencing some redirection issues we have no control over as they are done in the root domain.
http://oldsite.com redirects to https://www.oldsite.com then finally to https://www.newsite.com
The redirection should be as follows:
http://oldsite.com -> https://oldsite.com -> https://www.newsite.com
Please update Optimzely’s configuration to do these redirects properly
15 votes -
Visual compare feature in core product
We're using this add-on on Episerver World and it's very good: https://www.david-tec.com/2018/03/visual-compare-option-available-for-episerver-11/
I think it should be included in the core product so that it is available to everyone.13 votes -
Improve user experience for editors when switching from one site to another
At the moment, when a logged in editor switches from one site (Site A to another (Site B, where she/he has access to, the user is forced to re-log-in to Site B, and the entire CMS is re-loaded, which takes a long time. The current user experience is less than ideal. The customer raising this feedback has about 50 primary websites, with a total of 150 sub-sites.
13 votes -
Hide broken links on expired content from Link Status report
Currently, the Link Status report shows broken links that are present on expired pages. I would prefer it if broken links on expired content could be excluded from the report.
This could be configurable.
Jira ticket (https://jira.sso.episerver.net/browse/CMS-2403311 votes -
A more competitive price for the CMS license
As a customer I want to be able to pay a price to use the product that is reasonable and competitive compared to similar products so that I can choose Episerver CMS as platform instead of alternatives like Umbraco or Wordpress.
Money I spend on license is money that I cannot spend on development of content and features which might make me choose another CMS platform.
Lowering the license price will result in you selling more licenses and maintaning your position as a leading CMS product company.9 votes -
As an editor, I'd like navigate to page associated to "For this Page" asset folder
When editing a content object located in "For this X" asset folder I would like to find/navigate to the X content.
This can be solved by adding a link in the "For this X" breadcrumb.9 votes
- Don't see your idea?