Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2018-15811: Releases · dnnsoftware/Dnn.Platform

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

CVE
#sql#web#ios#windows#google#microsoft#nodejs#js#git#perl#auth#ssl

v9.11.1

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues.
A grand total of 99 pull requests by 16 contributors were processed for this release.

Noteworthy Changes in v9.11.1****Optional Telerik Removal

This release completely removes Telerik from the codebase but can still be used to upgrade sites that have modules depending on Telerik.

  • If you perform a clean install of this version, Telerik will NOT be installed.
  • If you upgrade an instance on which Telerik was already removed, it will NOT be reinstalled.
  • If you upgrade an instance that still has the Telerik libraries installed, the upgrade process will guide you through options to keep or remove Telerik.
    Additionally, if you can’t remove Telerik at the moment of upgrade but plan to do it later on, a wizard will be installed to help you remove Telerik later on.
    Telerik removal is still optional upon upgrades, but HIGHLY RECOMMENDED.

Bug Fixes

  • Fixed issue where the uninstall extension shows version 0.0.0 #5285 by @Mostafa-Moafi
  • Fixed an issue that caused Non-Integer Thumbnail Sizes to Break API Calls #5292 by @v-karbovnichy
  • Fixed an issue where an invalid request in Change Password page returned a 500 status code #5309 by @berkarslan-xo
  • Fixed an issue where MonacoEditor was not loading for child aliases #5328 by @bdukes
  • Fixed an issue where saving IsSecure property of Portal Setting was not working #5329 by @ryanjagdfeld
  • Fixed an issue where sitemap priorities reverted to 1 in non us culture #5331 by @skamphuis
  • Fixed an issue that prevented uploading images smaller than configured resize dimensions #5341 by @skamphuis
  • Fixed an issue where CKE upload document with image upload resize dimensions caused the upload to fail #5342 by @skamphuis
  • Fixed an issue where CKE would break the browser if trying to upload a favicon #5343 by @skamphuis
  • Fixed an issue where resource manager would not have appropriate root folder #5351 by @valadas
  • Fixed an issue where first level folders were auto-expanded. #5355 by @valadas
  • Fixed an issue where resource manager modal could not contain long lists #5359 by @valadas
  • Fixed an ossie where the IP Address was not correctly handled #5372 by @davidjrh
  • Fixed an infinite loop in schedule item. #5378 by @valadas
  • Fixed an issue where comments in manifest would make install fail #5380 by @valadas
  • Fixed a localizing issue where parent tabs were breaking existing localized child tabs #5382 by mwigley-trilogy
  • Fixed a casing issue on SelectedItemTemplate property #5385 by @donker
  • Fixed an issue loading progress file in content localizer #5386 by @donker
  • Fixed some properties made incorrectly recursive #5390 by @bdukes
  • Fixed an issue that could cause duplicate rows to show in page->advanced->SEO #5402 by @mwigley-trilogy
  • Fixed ‘Add Missing Languages’ when parent page only has some languages enabled #5404 by @mwigley-trilogy
  • Fixed an issue uploading documents through link popup #5407 by @skamphuis
  • Fixed renamed public/protected properties and fields #5412 by @bdukes
  • Fixed an issue where resource manager would not keep track of whether in global assets mode #5414 by @bdukes
  • Fixed an issue in Browser.aspx.cs #5416 by @FRMN-FRE
  • Fixed an issue where CKEditor browser was not loading #5432 by @bdukes
  • Fixed an issue that prevented sending smtp test emails #5445 by @valadas
  • Remove Settings from Resource Manager display for users without permission #5446 by @david-poindexter
  • Fixed monaco editor not being loaded when switching between css console and sql console #5453 by @mwigley-trilogy
  • Fixed an issue where URLControl checks upload permissions were wrong #5461 by @skamphuis
  • Fixed an issue where the attribute maxAllowedContentLength was not properly saved #5465 by @ryanjagdfeld
  • Fixed an issue that prevented managing folders in user mode #5484 by @valadas
  • Fixed an issue where it was not possible to edit the root folder in resource-manager #5485 by @valadas
  • Fixed an issue where the SQL editor would not have height #5491 by @valadas
  • Fixed an issue that prevented creating packages from UI #5493 by @valadas
  • Fixed an issue where Region Dropdown did not appear when registration page loaded and autofilled country field #2140 @rodrigoratan
  • Fixed an issue where Resource Manager would not upload files with uppercase extensions #5507 by @david-poindexter
  • Fixed an issue that caused an infinite loop when saving pofiles #5508 by @valadas
  • Fix Path.Combine with glbConfigFolder #5526 by @bdukes
  • Fixed an issue where the html editor browser would fail #5533 #5536 by @erw13n

Developer Experience / Documentation

  • Smoothed out potential issues using ResetDevSite #5310 by @bdukes
  • Updated to Cake.Issues.MsBuild 2.0 Beta 1 #5327 by @pascalberger
  • Applied analyzer (StyleCop) auto-fixes #5337 by @bdukes
  • Fixed an issue whre the library debug build was not put into the debug folder #5396 by @donker
  • Multiple Stylecop & doc fixes #5400 by @bdukes
  • Correct GetUsersBasicSearch docs #5413 by @bdukes
  • Fixed intermittent build issues #5421 by @valadas
  • Resolved an XCOPY error during build #5425 by @bdukes
  • Changed build to run all npm builds before backend builds. #5433 by @valadas
  • Updated Security Policy #5451 by @mitchelsellers
  • Multiple StyleCop fixes #5455 by @bdukes
  • Fixed multiple Stylecop 16xx warnings #5480 by @bdukes
  • Fixed an issue where sourcemaps would not load #5488 by @valadas
  • Commited docs for dnn-resource-manager #5489 by @valadas
  • Fixed an issue where sourcemaps would only load on home page #5496 by @valadas
  • Fixed multiple #2140 issue
  • Fixed some obsolete method usages #5510 by @bdukes

Enhancements

  • Resource manager folders can now be opened with double-click #5352 by @valadas
  • Modified Next Button on install wizard to support localization #5368 by @uzmannazari
  • Made search placeholder localizable #5369 by @uzmannazari
  • Added host level setting for browser and upload folders of html editor #5409 by @skamphuis
  • Added support for a Notes field in IP Filters #5411 by @valadas

Maintenance

  • Bumped Microsoft.NETFramework.ReferenceAssemblies.net472 from 1.0.2 to 1.0.3 #5253 by dependabot
  • Bumped NSubstitute from 4.3.0 to 4.4.0 #5254 by dependabot
  • Auto Compressed Images #5287 by github-actions
  • Bumped valadas/set-dnn-manifest-versions from 1.2.0 to 1.3.0 #5350 by dependabot
  • Bumped moment from 2.29.2 to 2.29.4 #5353 by dependabot
  • Bumped eventsource from 1.0.7 to 1.1.2 #5354 by dependabot
  • Bump repo-sync/pull-request from 2.6 to 2.8 #5364 by dependabot
  • Bumped Microsoft.Web.Infrastructure from 1.0.0.0 to 2.0.0 #5366 by dependabot
  • Bumped Cake.Frosting from 2.2.0 to 2.3.0 #5367 by dependabot
  • Bumped lerna to 6.x#5379 by @bdukes
  • Reverted PR #5366 due to issues #5384 by @donker
  • Centralized all portal template operations in the library project #5387 #5397 by @donker
  • Bumped System.Data.SqlClient from 4.8.3 to 4.8.5 in /Build #5389 by dependabot
  • Bumped repo-sync/pull-request from 2.8 to 2.9 #5393 by dependabot
  • Bumped peterjgrainger/action-create-branch from 2.2.0 to 2.3.0 #5399 by dependabot
  • Bumped Newtonsoft.Json from 13.0.1 to 13.0.2 #5417 by dependabot
  • Bumped Yarn.MSBuild from 1.22.17 to 1.22.19 #5418 by dependabot
  • Bumped peterjgrainger/action-create-branch from 2.3.0 to 2.4.0 #5419 by dependabot
  • Bumped decode-uri-component from 0.2.0 to 0.2.2 #5420 by dependabot
  • Bumped jQuery to 3.5.1 in editBar #5426 by @bdukes
  • Bumped express from 4.16.4 to 4.18.2 #5427 by dependabot
  • Bumped qs from 6.7.0 to 6.11.0 #5434 by dependabot
  • Removed now-unused Yarn.MsBuild package #5439 by @bdukes
  • Fixed out-of-sync package versions in test projects #5440 by @bdukes
  • Fixed PersonaBar project referencing wrong version of Newtonsoft.Json #5441 by @bdukes
  • Upgraded Cake dependencies #5442 by @bdukes
  • Bumped repo-sync/pull-request from 2.9 to 2.11 #5457 by dependabot
  • Bumped NUnit3TestAdapter to 4.3.1 #5473 by @bdukes
  • Bumped GitVersion.Tool and removed .NET 5 SDK #5474 by @bdukes
  • Bumped NuGet.CommandLine from 5.10.0 to 6.4.0 #5475 by @bdukes
  • Bumped Microsoft.TestPlatform from 16.11.0 to 17.4.1 #5476 by @bdukes
  • Bumped react-redux from 5.1.1 to 8.0.5 #5487 by dependabot
  • Bumped React from 16.6.3 to 16.14.0 #5490 by @valadas
  • Bumped Moment.JS to 2.29.4 #5494 by @mitchelsellers
  • Bumped Moq to v4.18.4 #5498 by @valadas
  • Bumped repo-sync/pull-request from 2.11 to 2.12 #5499 by dependabot
  • Bumped ua-parser-js from 0.7.19 to 0.7.33 #5502 by dependabot

List of Contributors

@bdukes Brian Dukes
@valadas Daniel Valadas
@skamphuis Stefan Kamphuis
@donker Peter Donker
@mwigley-trilogy Matthew Wigley
@david-poindexter David Poindexter
@mitchelsellers Mitchel Sellers
@uzmannazari Ali Nazari
@ryanjagdfeld Ryan Jagdfeld
@rodrigoratan Rodrigo Ratan
@berkarslan-xo Berk Arslan
@pascalberger Pascal Berger
@Mostafa-Moafi Mostafa Moafi
@v-karbovnichy Vyacheslav Karbovnichy
@davidjrh David Rodriguez
@FRMN-FRE
@erw13n Erwin Yuliento

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

MD5 Checksums

File

Checksum

DNN_Platform_9.11.1_Deploy.zip

749ab2895325c5f18a5b4c83e3220e16

DNN_Platform_9.11.1_Install.zip

08eebefad55065207fac50ae56d2ce94

DNN_Platform_9.11.1_Symbols.zip

f1d9e2c6728fe3df1f383af70e725928

DNN_Platform_9.11.1_Upgrade.zip

00951cf4f743d57bab470686cd48032a

v9.11.0

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues. A grand total of 168 pull requests by 18 contributors were processed for this release.

Noteworthy Changes in v9.11.0****Optional Telerik Removal

This release completely removes Telerik from the codebase, but can still be used to upgrade sites that have modules that have a Telerik dependency.

  • If you perform a clean install, Telerik will NOT be installed.
  • If you upgrade an instance where Telerik was already removed, it will NOT be reinstalled.
  • If you upgrade an instance that still has the Telerik libraries installed, the upgrade process will guide you through options to keep or remove Telerik.
  • If you upgrade an instance that has third-party extensions with Telerik dependencies, the upgrade process will provide instructions for how to proceed with Telerik removal manually.
  • Lastly, if you can’t remove Telerik at the time of upgrade, but plan to do it later on, a wizard will be installed to help you remove Telerik at the desired time.

Telerik removal is still optional upon upgrades, but HIGHLY RECOMMENDED.

Brand new Resource Manager (file management)

We listened to your feedback and rewrote the Resource Manager from the ground up, implementing the most requested features and improvements:
- Support for a “list” and “card” view
- Allows better sorting of files
- Better UI for long file names (no longer truncated)
- Images are no longer obscured within an imposed circle style
- Improved search
- Improved performance
- Less dependencies
- Displays more information about files within the various views
- Allows batch operations on files/folders
- Supports infinite scroll
- Full accessibility via keyborad
- Responsive to its container to allow future use directly in the Persona Bar (future enhancement)

Performance improvements

This release updated a large number of dependencies including some low-level ones like Newtonsoft.Json and PetaPOCO which significantly improved performance for installation, updates and runtime.

Bug Fixes

  • Fixed an issue getting Folders by Permissions #4897 Thanks @yog-it
  • Fixes an issue where ClientResourceManager would throw a null reference exception when called from scheduled tasks #4899 Thanks @robsiera
  • Fixed an issue where a query string would not be kept if Convert to lower case setting was enabled. #4911 Thanks @zyhfish
  • Fixed an incorrect datetime culture format in outputcache FileProvider #4915 Thanks @thienvc
  • Fixed SEO tab not updating correctly after deleting a URL #4925 Thanks @daguiler
  • Fixed an issue with the OutputCacheAddItem stored procedure #4937 Thanks @thienvc
  • Fixed an issue where WebFormsMvp initial version mismatched with the config #5020 Thanks @valadas
  • Fixed an issue getting the host tab URL in some situations #5052 Thanks @bdukes
  • Fixed a relative path issues that prevented loading monaco editor in some scenarios #5066 Thanks @donker
  • Fixed a postback issue with the cke editor #5078 Thanks @nellaaayyy
  • Fixed an issue with undefined isProduction in Yarn scripts #5121 Thanks @donker
  • Fixed a crash caused by a web spider providing an invalid referrer uri with the request. #5184 Thanks @robheffo79
  • Fixed an issue in HTML module with invalid HTML #5188 Thanks @bdukes
  • Fixed an issue where CKEditor Provider dialogs would not use the Client Resouce Manager #5205 Thanks @bdukes
  • Resolved a null reference exception when data types were missing in profile properties #5231 Thanks @bdukes
  • Fixed a wrong file name for jQuery UI #5238 Thanks @bdukes
  • Fixed a bug that prevented selecting folders for Browser Root and Default Upload folders in HtmlEditor #5122 Thanks @skamphuis
  • Fixed a wrong response code when creating an invalid user. #5228 Thanks @armaganpekatik

Developer Experience / Documentation

  • Added a workflow to auto-open PRs to v10 branch. #4755 Thanks @bdukes
  • When upgrading a module, the web.config binding redirect comments now use the package version instead of the file version (this does not affect the actual binding). #4873 Thanks @dimarobert
  • Updated Documentation link in issue templates. #4876 Thanks @david-poindexter
  • Standardized DNN Manifest Items such as organization names, etc. #4890 Thanks @mitchelsellers
  • Adjusted the release branch merge workflow to use sha. #4926 Thanks @bdukes
  • Ajusted CI build to use windows-2019 #5007 Thanks @bdukes
  • Removed Evoq references in codebase. #5009 Thanks @bdukes
  • Corrected external repositories in build.md #5019 Thanks @valadas
  • Fixed versions of dependencies in Nuget spec files #5028 Thanks @donker
  • Fixed a failure to report issues when clean build task fails #5034 Thanks @bdukes
  • Fixed an issue where warnings from build were not being reported. #5056 thanks @bdukes
  • Adjusted link to powershell security docs for cake #5079 Thanks @valadas
  • Fixed 2 build issues #5129 Thanks @valadas
  • Disabled PR merge for 10.0.0 branch #5223 Thanks @bdukes
  • Added workflow to auto-open PRs to v9.11 branch #4913 Thanks @bdukes
  • Added support for HtmlAttributesAsString in html module views #5242 #5244 Thanks @valadas @bdukes

Enhancements

  • Updated cookiesandme.com to cookiesandyou.com to match the actual URL. #4880 Thanks @david-poindexter
  • Created ClientResourceSettings overrides to specifiy the portalId without relying on HttpContext #4901 Thanks robsiera
  • Caches the roles array in the user info object. #4907 Thanks @zyhfish
  • Enhanced resource manager css when used with some older themes. #4929 Tahnks @Timo-Breumelhof
  • Filters scrips from module messages #4930 Thanks @donker, @valadas
  • Encodes html in emails for proper display #4932 Thanks @bdukes
  • Made check for RequestVerificationToken case insensitive as per RFC 7230 and RFC 7540. #4959 thanks @dimarobert
  • Added thread culture (localization) support in partial MVC views. #5004 Thanks @dimarobert
  • Reports build errors as errors to Azure DevOps #5016 Thanks @bdukes
  • Update GTM to follow Google best practices #5023 Thanks @david-poindexter
  • Added support for localization of search categories #5053 Thansk @Andy9999
  • Allows optionally removing rel from privacy and terms from skinObjects #5054 #5057 Thanks @Andy9999
  • Updated the existing check to report on the status of Telerik #5077 Thanks @daguiler
  • Added new Security Analyzer check for permissions on “Activity Feed” and “User Profile” pages #5080 Thanks @daguiler
  • Allow the underlying FileInstaller to delete the file if needed. #5087 Thanks @dimarobert
  • Improved eventlog ip address with proxy. #5091 Thanks @skamphuis
  • Improved error messaging when parsing extension packages. #5097 Thanks @bdukes
  • Improved text encoding on fields. #5106 Thanks @armaganpekatik
  • Added unique suffix to artifact name. #5199 Thanks @bdukes
  • Removed unused DnnDropDownCheckBoxes class. #5206 Thanks @bdukes
  • Specified latest version for 9.11 merge action #5224 Thanks @bdukes
  • Restricted log viewing to log files only #5233 Thanks @mitchelsellers
  • Replaced eval usages with JSON.parse where appropriate in multiple scripts #5239 Thanks @bdukes
  • Improve SSL initial setup approach #4892 #5189 Thanks @donker
  • Standardized Upload interfaces #4909 Thanks @bdukes
  • Updated website templates to set User Registration to None by default #4916 Thanks @david-poindexter
  • Updated website templates to make Activity Feed, My Profile, Friends, and Messages pages visible to Registered Users only by default #4921 Thanks @david-poindexter
  • Completelly replaced Digital Assets Manager in favor of the new Resource Manager which installs by default now #4987 #5194 Thanks @david-poindexter @valadas @donker
  • Purges expired auth cookies when no longer needed #5001 Thanks @donker
  • Added JsonIgnore Attribute to prevent unneeded serialization #5006 Thanks @mtrutledge
  • Added folder cleanup support to CleanupInstaller #5090 Thanks @daguiler
  • Updated UpgradeWizard.aspx to require a superuser to choose whether to keep Telerik or to remove Telerik
  • Added support for top level pages permissions #5118 #5209 @bdukes @DanielBolef
  • CKEditor can now resize images on upload and support drag-and-drop through easy-image plugin. #5128 #5144 Thanks @skamphuis
  • Improved the server screen UI #5152 Thanks @donker
  • Implemented new resource manager as per feedback #5240 #5241 Thanks @valadas @david-poindexter @mitchellsellers @donker @bdukes

Maintenance

  • Bumped react-collapse from 4.0.3 to 5.1.0 #4808 #5193
  • Bumped System.Runtime.CompilerServices.Unsafe from 4.5.3 to 5.0.0 #4834
  • Bumped superagent from 3.8.3 to 6.1.0 #4848 #4987
  • Bumped WebFormsMVP from 1.4.1.0 to 1.4.5 #4863 #5017
  • Bumped actions/checkout from 2.3.4 to 2.3.5 #4878
  • Removed nuka-carousel reference. #4891 Thanks @bdukes
  • Bumped actions/checkout from 2.3.5 to 2.4.0 #4896
  • Bumped peter-evans/create-pull-request from 3.10.1 to 3.11.0 #4902
  • Updated version in Yarn lock file after bumping multiple dependencies #4914 Thanks @bdukes
  • Bumped less from 3.8.1 to 4.1.2 #4927 #5063
  • Bumped peter-evans/create-pull-request from 3.11.0 to 3.12.0 #4964 #4965
  • Bumped peterjgrainger/action-create-branch from 2.0.1 to 2.1.0 #4972
  • Bumped System.Runtime.CompilerServices.Unsafe from 4.5.3 to 5.0.0 #4985
  • Bumped NUnit3TestAdapter from 4.0.0 to 4.2.0 #4986 #4993
  • Bumped peter-evans/create-pull-request from 3.12.0 to 3.12.1 #4991 #4993
  • Bumped Microsoft.Build.Tasks.Git from 1.0.0 to 1.1.1 #4992 #5013
  • Bumped Cake to 2.x #5010 Thanks @bdukes
  • Bumped NSubstitute from 4.2.2 to 4.3.0 #5012 #5015
  • Bumped peter-evans/create-pull-request from 3.12.1 to 3.14.0 #5030 #5031
  • Bumped actions/checkout from 2.4.0 to 3 #5035
  • Bumped peter-evans/create-pull-request from 3.14.0 to 4 #5061
  • Bumped peterjgrainger/action-create-branch #5067
  • Bumped esli…

v9.10.2

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues.
A grand total of 35 pull requests by 8 contributors were processed for this release.

Noteworthy Changes in v9.10.2****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

Bug Fixes

  • Fixed a serialization issue with authentication config #4788 Thanks @bdukes
  • Fixed an issue that prevented inserting links using the default HTML Editor Provider #4802 Thanks @valadas
  • Add back alternate views for core mail provider #4805 Thanks @bdukes
  • Fixed an issue where custom Analyzer types generate System.MissingMethodException #4824 Thanks @berkarslan-xo
  • Fixed an issue where it was impossible to edit html on child portals #4828 Thanks @valadas
  • Fixed an issue where the wrong RedirectAfter tabs were showing for localized sites. #4851 Thanks @valadas

Developer Experience / Documentation

  • Avoids HTML module using Globals.DependencyProvider #4786 Thanks @bdukes
  • Always upload build artifacts #4813 Thanks @bdukes
  • Marked nuget dependency from DotNetNuke.Web on Microsoft.AspNet.WebApi.Core #4815 Thanks @valadas
  • Added documentation about yarn updates #4827 Thanks @valadas
  • Fixed a typo in README.md #4853 Thanks @helloausrine

Enhancements

  • Corrected some styling issues with IE11 #4790 Thanks @schotman
  • Corrected a typo in CKEditor for dnnpages plugin in french #4803 Thanks @valadas
  • Allow multiple DesktopModules per PackageID #4811 Thanks @bdukes @kestasjk
  • Removed module specific styling for a default DNN Button #4831 Thanks @Timo-Breumelhof
  • Removal of “Dummy” from code #4837 Thanks @mitchelsellers

Maintenance

  • Bumped PetaPoco.Compiled from 6.0.415 to 6.0.480 #4741 Thanks @dependabot @bdukes
  • Bumped eslint from 5.8.0 to 7.32.0 #4770 Thanks @dependabot @valadas @bdukes
  • Bump peter-evans/create-pull-request from 3.10.0 to 3.10.1 #4792 Thanks @dependabot
  • Upgraded to Cake 1.2.0 #4800 Thanks @bdukes
  • Bumped NSubstitute from 3.1.0 to 4.2.2 #4806 Thanks @dependabot @bdukes
  • Bumped redux from 4.0.1 to 4.1.1 #4807 Thanks @dependabot @bdukes
  • Bumped es6-shim from 0.35.0 to 0.35.6 #4809 Thanks @dependabot @bdukes
  • Bumped react-test-renderer from 16.8.6 to 17.0.2 #4810 Thanks @dependabot
  • Bumped Cake.Frosting.Issues.Recipe from 1.2.0 to 1.3.1 #4812 Thanks @dependabot
  • Bumped Yarn from from 3.0.0 to 3.0.2 #4814 Thanks @bdukes
  • Bumped AutoFixture from 4.6.0 to 4.17.0 #4817 Thanks @dependabot @bdukes
  • Removed unused RestSharp reference #4838 Thanks @bdukes
  • Bumped Dnn.CakeUtils from 2.0.1 to 2.0.2 #4845 Thanks @dependabot
  • Bumped @storybook/addon-actions from 5.0.11 to 6.3.9 #4847 Thanks @dependabot @bdukes
  • Replaced old Newtonsoft.Json references #4852 Thanks @valadas
  • Bumped Fare from 2.1.1 to 2.1.2 #4855 Thanks @dependabot @bdukes
  • Created package for Microsoft.Extensions.FileSystemGlobbing #4856 Thanks @valadas
  • Bumped redux-devtools-dock-monitor from 1.1.3 to 1.2.0 #4858 Thanks @dependabot @bdukes
  • Bumped MimeKit from 2.13.0 to 2.15.1 #4861 Thanks @dependabot @bdukes

List of Contributors

  • @bdukes Brian Dukes
  • @valadas Daniel Valadas
  • @mitchelsellers Mitchel Sellers
  • @schotman Peter Schotman
  • @Timo-Breumelhof Timo Breumelhof
  • @kestasjk Kestas “Chris” Kuliukas
  • @berkarslan-xo Berk Arslan
  • @helloausrine

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

MD5 Checksums

File

Checksum

DNN_Platform_9.10.2_Deploy.zip

cfc402a2c324e98f2cd27368ccd0c209

DNN_Platform_9.10.2_Install.zip

65c313fc0aefeb3bf597e78283897b9c

DNN_Platform_9.10.2_Symbols.zip

6f93c5e32f9aea0d1ababb75b8724931

DNN_Platform_9.10.2_Upgrade.zip

5a5bb3bc82cb3f1ffdea2336129561a7

v9.10.1

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues.
A grand total of 15 pull requests by 4 contributors were processed for this release.

Noteworthy Changes in v9.10.1****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

Security

This release includes fixes for known security issues, please consult the DNN Security Center for more details.

Bug Fixes

  • Fixed an issue where deleting the parent page while the child page was open didn’t redirect #4761 Thanks @berkarslan-xo
  • Fixed an issue where dnn.js was not requested for cookie consent #4763 Thanks @bdukes
  • Fixed an issue where the wrong PortalId was getting set when there were multiple sites existing #4773 Thanks @berkarslan-xo
  • Fixed an issue where some field values were missing in messaging #4777 Thanks @bdukes

Developer Experience / Documentation

  • Fixed an issue with the issue template and version update action #4754 Thanks @valadas
  • Added lint task to all node projects #4774 Thanks @valadas

Maintenance

  • Bumped react-dom from 16.8.6 to 16.13.0 #4726 Thanks @dependabot
  • Bumped react-tooltip from 3.9.0 to 4.2.21 #4727 Thanks @dependabot
  • Bumped NUnit from 2.6.4 to 3.13.2 #4764 Thanks @bdukes
  • Bumped enzyme-to-json from 3.3.5 to 3.6.2 #4769 Thanks @dependabot
  • Bumped Yarn to version 3 Thanks @bdukes
  • Bumped Content Delivery Framework to v1.9.10 #4780 Thanks @valadas

List of Contributors

  • @bdukes Brian Dukes
  • @valadas Daniel Valadas
  • @berkarslan-xo Berk Arslan
  • @dependabot dependabot bot

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

MD5 Checksums

File

Checksum

DNN_Platform_9.10.1_Deploy.zip

04fa38dd19042962397f199cd37920a6

DNN_Platform_9.10.1_Install.zip

e59b4aa6b997485f0c86d48cec94b889

DNN_Platform_9.10.1_Symbols.zip

0dedcdcb41df40ca21e632cbe5983660

DNN_Platform_9.10.1_Upgrade.zip

d170768d8bdae7e8c37e27d1337e8413

v9.10.0

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues.
A grand total of 61 pull requests by 15 contributors were processed for this release.

Noteworthy Changes in v9.10.0****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

New features

  • Added support for Azure folder provider cache-control #4687 Thanks @meetmandeep
  • Improve base styling of PersonaBar & EditBar and allow customization #4691 Thanks @david-poindexter @valadas
  • Brought back update notification #4695 Thanks @donker
  • Added Web.config schema validation to the Configuration Manager #4707 Thanks @daguiler
  • Added support for absolute and relative URLs for pages #4730 Thanks @david-poindexter @valadas

Enhancements

  • Added email to password sent message for error tracing, fixes #4641 Thanks @jcmrva
  • Improved wording on Site Groups localization #4675 Thanks @valadas
  • Clarified text on module anchor feature #4678 Thanks @valadas
  • Improved Validation IP Address for login #4702 Thanks @ufoloko
  • Removed the logo from the Under Construction page #4722 Thanks @joshgk00
  • Enhanced styling for server summary in persona bar #4731 Thanks @david-poindexter

Bug Fixes

  • Fixed an issue where disabling password strength meter did not disable it in the password reset form #4615 Thanks @yog-it
  • Fixed an issue where MailKitMailProvider used an incorrect mail priority #4619 Thanks @bdukes
  • Fixed an issue where FolderManager would sometimes throw a null reference exception #4622 Thanks @epdubi
  • Fixed an issue where some tooltips were not visible in SiteGroups #4627 Thanks @Mhtshum
  • Fixed an issue where the HTML Editor Manager would fail to load #4631 Thanks @bdukes
  • Fixed an issue with RedirectAfter settings being overwritten #4638 Thanks @yog-it
  • Fixed an issue the prevented uploading files into assets on Turkish localization #4655 Thanks @manojattal
  • Fixed an issue where Breadcrumbs had invalid metadata for disabled pages #4671 Thanks @Andy9999
  • Fixed some typos in Prompt localization #4674 Thanks @valadas @bdukes
  • Fixed an issue where exporting a page after changing a module’s order within the same pane didn’t reflect in imported site #4685 Thanks @berkarslan-xo
  • Fixed an issue where Cache-Setting ‘NoCaching’ was not saved #4703 Thanks @manojattal
  • Fixed an issue where UserInfo.UserName was wrong with “Use email as username” setting turned on #4708 Thanks @donker
  • Fixed an issue where SQL Console raised an error for variable declarations with “@” character #4714 Thanks @berkarslan-xo
  • Fixed an issue where the profile picture was not shown to anonymous users. Thanks @manojattal
  • Fixed an issue that prevented RC1 from installing or upgrading #4743 Thanks @bdukes

Developer Experience / Documentation

  • Adjusted labels used by dependabot #4603 Thanks @bdukes
  • Produce snupkg format for NuGet #4608 Thanks @bdukes
  • Manually updated version from 9.9.0 to 9.9.1 #4693 Thanks @david-poindexter
  • Committed linter auto-fixes across JS and JSX files #4694 Thanks @david-poindexter
  • Cleaned up some DotNetNuke.Web.Mvc warnings #4717 Thanks @bdukes

Maintenance

  • Bumped NTestDataBuilder from 1.0.2 to 2.0.0 #4584 Thanks @dependabot @bdukes
  • Bumped Cake.Json from 6.0.0 to 6.0.1 #4585 Thanks @dependabot
  • Bumped NBuilder from 5.0.0 to 6.1.0 #4589 Tahnks @dependabot
  • Bumped @babel/plugin-transform-react-jsx from 7.3.0 to 7.13.12 #4590 Thanks @dependabot
  • Bumped eslint-plugin-babel from 5.3.0 to 5.3.1 #4591 Thanks @dependabot
  • Bumpep svg-url-loader from 2.3.2 to 7.1.1 #4592 Thanks @dependabot
  • Bumpep redux-mock-store from 1.5.3 to 1.5.4 #4593 Thanks @dependabot
  • Bumpep eslint-loader from 2.1.1 to 4.0.2 #4594 Thanks @dependabot
  • Bumped string.prototype.startswith from 0.2.0 to 1.0.0 #4633 Thanks @dependabot
  • Bumped react-height from 3.0.0 to 3.0.1 #4634 Thanks @dependabot
  • Bumped webpack-bundle-analyzer from 3.3.2 to 4.4.1 #4635 Thanks @dependabot
  • Bumped @babel/plugin-transform-object-assign from 7.2.0 to 7.12.13 #4636 @dependabot
  • Bumped webpack-node-externals from 1.7.2 to 3.0.0 #4637 Thanks @dependabot
  • Bumped valadas/get-release-branch-version from 1 to 1.0.1 #4658 Thanks @dependabot @valadas
  • Bumped actions/checkout from 2 to 2.3.4 #4659 Thanks @dependabot
  • Bumped peter-evans/create-pull-request from 3 to 3.9.1 #4660 Thanks @dependabot
  • Bumped valadas/set-dnn-manifest-versions from 1 to 1.2.0 #4661 Thanks @dependabot @valadas
  • Bumped peter-evans/create-pull-request from 3.9.1 to 3.9.2 #4666 Thanks @dependabot
  • Removed unused localization strings in GlobalResources.resx #4676 Thanks @valadas
  • Deleted InvalidConfiguration.ascx.resx in HtmlEditorManager #4677 Thanks @valadas
  • Bumped peter-evans/create-pull-request from 3.9.2 to 3.10.0 #4680 Thanks @dependabot
  • Bumped @babel/plugin-transform-react-jsx from 7.13.12 to 7.14.3 #4696 Thanks @dependabot
  • Bumped throttle-debounce from 2.1.0 to 3.0.1 #4697 Thanks @dependabot
  • Bumped @babel/plugin-proposal-object-rest-spread from 7.4.4 to 7.14.4 #4699 Thansk @dependabot
  • Deprecated DisplayCopyright Host Setting #4712 Thanks @joshgk00
  • Bumped MimeKit from 2.10.1 to 2.13.0 #4715 Thanks @dependabot @bdukes
  • Bumped Microsoft.AspNet.WebApi.Core from 5.2.3 to 5.2.7 #4716 Thanks @bdukes
  • Bumped Microsoft.AspNet.WebPages.WebData from 3.1.2 to 3.2.7 #4716 Thanks @bdukes
  • Bumped Microsoft.AspNet.WebApi.Client from 5.2.3 to 5.2.7 #4716 Thanks @bdukes
  • Bumped Microsoft.AspNet.WebApi.WebHost from 5.2.3 to 5.2.7 #4716 Thanks @bdukes

List of Contributors

  • Brian Dukes @bdukes
  • Daniel Valadas @valadas
  • David Poindexter @david-poindexter
  • Manoj Attal @manojattal
  • Peter Donker @donker
  • Berk Arslan @berkarslan-xo
  • Josh Slaughter @joshgk00
  • Ryan Jagdfeld @yog-it
  • Mandeep Singh @meetmandeep
  • Daniel Aguilera @daguiler
  • Mohtisham Zubair @Mhtshum
  • Andy9999 @Andy9999
  • ufoloko @ufoloko
  • Eric Wagner @epdubi
  • Josh M @jcmrva

Testers

We would like to thank all testers for this release including Joe Craig and Jeremy Farrance

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade on DNN Docs. If this is your 100th time upgrading DNN, maybe review these guides and submit a few changes!

MD5 Checksums

File

Checksum

DNN_Platform_9.10.0_Deploy.zip

e6d98d5308242e4ca3a82f49e7cc75ab

DNN_Platform_9.10.0_Install.zip

f87ebb993abf360d1422eaa552fd2b69

DNN_Platform_9.10.0_Symbols.zip

9533b31f74d2dd9483de90ac0f6ba781

DNN_Platform_9.10.0_Upgrade.zip

518818cf4f34bf124674b56119e3f725

v9.9.1

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues. A grand total of 27 pull requests by 9 contributors were processed for this release.

Noteworthy Changes in v9.9.1****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

Special Attention****New features

  • Added support for Page Stylesheets stored in AzureFolderProvider #4500 @msant7
  • Added capability to add existing modules from other sites in site group #4597 Thanks @dpoindexter @valadas and @jncraig

Enhancements****Bug Fixes

  • Fixed an issue where AzureFolderProvider was uploading the same file with different case #4482 Thanks @msant7
  • Fixed an issue where the PersonaBar would not load if in an iframe #4492 Thanks @jmbockhorst
  • Removed extra hardcoded spaces from UserAndLogin Theme Object #4505 Thanks @Timo-Breumelhof
  • Ensures the content is decoded before being passed to tokenization providers. #4527 Thanks @rhaiamz
  • Fixed an issue where checksums where not generated in CI builds #4532 Thanks @valadas
  • Fixed an issue where CK-Editor provider did not include image files in install package #4546 Thanks @skamphuis
  • Fixed redirect to primary alias when PortalAliasMapping is set to redirect #4547 Thanks @skamphuis
  • Fixed upgrade issue involving MailKit by including it in a package #4575 Thanks @bdukes
  • Fixed an issue that prevented MailKit configuration upon some upgrades #4582 Thanks @valadas

Developer Experience / Documentation

  • Enhanced CI integration of Cake #4439 Thanks @bdukes
  • Updated Compress Images GitHub Actions workflow #4478 Thanks @bdukes
  • Adjusted Yarn configuration for CI #4494 Thanks @bdukes
  • Adjusted .editorconfig settings #4530 Thanks @bdukes
  • Enable URL integration tests to run #4531 @bdukes
  • Enabled Sourcelink #4543 Thanks @bdukes
  • Fix typo in image-actions #4544 Thanks @bdukes
  • Applied StyleCop to Build project #4554 Thanks @bdukes
  • Switched to binary logger instead of console logger for speedier builds #4576 Thanks @bdukes

Maintenance

  • Remove duplicate references to Yarn.MsBuild #4490 Thanks @bdukes
  • Upgraded Yarn to latest 1.x #4493 Thanks @bdukes
  • Removed references to Module Creator #4495 Thanks @bdukes
  • Added async support to mail providers #4498 Thanks @bdukes
  • Upgraded Cake to 1.1.0 #4552 Thanks @bdukes
  • Added back Dependabot to the project #4577 Thanks @bdukes

List of Contributors

  • @bdukes Brian Dukes
  • @valadas Daniel Valadas
  • @skamphuis Stefan Kamphuis
  • @msant7 Michael Santoro
  • @david-poindexter David Poindexter
  • @jncraig Joe Craig
  • @Timo-Breumelhof Timo Breumelhof
  • @jmbockhorst Jon Bockhorst
  • @rhaiamz Popescu Cristian

Testing Team

Special thanks to the testing team led by @marietteknap.
@Tychodewaard Tycho de Waard
@jncraig Joe Craig

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

MD5 Checksums

File

Checksum

DNN_Platform_9.9.1_Deploy.zip

757e24e7b0c6c6273aa097dfcc78f414

DNN_Platform_9.9.1_Install.zip

7b4062d6816ee229ae2cfff0328f4698

DNN_Platform_9.9.1_Symbols.zip

16775a10f999e21defc5295a234ddc40

DNN_Platform_9.9.1_Upgrade.zip

af32d93d680299458d8be4a70daae022

v9.9.1-rc1

Release Candidate

This is a release candidate, please do not install in production environments. RC (Release Candidate) versions are meant for testing the next release. Please test in non-production environments.

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues. A grand total of 27 pull requests by 9 contributors were processed for this release.

Noteworthy Changes in v9.9.1****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

Special Attention****New features

  • Added support for Page Stylesheets stored in AzureFolderProvider #4500 @msant7
  • Added capability to add existing modules from other sites in site group #4597 Thanks @dpoindexter @valadas and @jncraig

Enhancements****Bug Fixes

  • Fixed an issue where AzureFolderProvider was uploading the same file with different case #4482 Thanks @msant7
  • Fixed an issue where the PersonaBar would not load if in an iframe #4492 Thanks @jmbockhorst
  • Removed extra hardcoded spaces from UserAndLogin Theme Object #4505 Thanks @Timo-Breumelhof
  • Ensures the content is decoded before being passed to tokenization providers. #4527 Thanks @rhaiamz
  • Fixed an issue where checksums where not generated in CI builds #4532 Thanks @valadas
  • Fixed an issue where CK-Editor provider did not include image files in install package #4546 Thanks @skamphuis
  • Fixed redirect to primary alias when PortalAliasMapping is set to redirect #4547 Thanks @skamphuis
  • Fixed upgrade issue involving MailKit by including it in a package #4575 Thanks @bdukes
  • Fixed an issue that prevented MailKit configuration upon some upgrades #4582 Thanks @valadas

Developer Experience / Documentation

  • Enhanced CI integration of Cake #4439 Thanks @bdukes
  • Updated Compress Images GitHub Actions workflow #4478 Thanks @bdukes
  • Adjusted Yarn configuration for CI #4494 Thanks @bdukes
  • Adjusted .editorconfig settings #4530 Thanks @bdukes
  • Enable URL integration tests to run #4531 @bdukes
  • Enabled Sourcelink #4543 Thanks @bdukes
  • Fix typo in image-actions #4544 Thanks @bdukes
  • Applied StyleCop to Build project #4554 Thanks @bdukes
  • Switched to binary logger instead of console logger for speedier builds #4576 Thanks @bdukes

Maintenance

  • Remove duplicate references to Yarn.MsBuild #4490 Thanks @bdukes
  • Upgraded Yarn to latest 1.x #4493 Thanks @bdukes
  • Removed references to Module Creator #4495 Thanks @bdukes
  • Added async support to mail providers #4498 Thanks @bdukes
  • Upgraded Cake to 1.1.0 #4552 Thanks @bdukes
  • Added back Dependabot to the project #4577 Thanks @bdukes

List of Contributors

  • @bdukes Brian Dukes
  • @valadas Daniel Valadas
  • @skamphuis Stefan Kamphuis
  • @msant7 msant7
  • @david-poindexter David Poindexter
  • @jncraig Joe Craig
  • @Timo-Breumelhof Timo Breumelhof
  • @jmbockhorst
  • @rhaiamz Popescu Cristian

Testing Team

Special thanks to the testing team led by @marietteknap.
@Tychodewaard Tychodewaard
@jncraig Joe Craig

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

v9.9.0

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues. A grand total of 48 pull requests by 16 contributors were processed for this release.

Noteworthy Changes in v9.9.0****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

Special Attention

  • New mail provider support

    As part of 9.9.0 we are introducing mail providers. By default the same existing mail provider is configured and there should be no changes needed.

    If you want to use the new MailKit provider (which has different support, namely it has better support for Office 365 mail), you can edit your web.config file as such:

    -<mail defaultProvider="CoreMailProvider"> +<mail defaultProvider="MailKitMailProvider"> <providers> <clear /> <add name="CoreMailProvider" type="DotNetNuke.Services.Mail.CoreMailProvider, DotNetNuke" hideCoreSettings="False" /> <add name="MailKitMailProvider" type="DotNetNuke.Services.Mail.MailKitMailProvider, DotNetNuke" hideCoreSettings="False" /> </providers> </mail>

New features

  • Added MailKit mail provider. #4156 Thanks @meetmandeep @bdukes
  • Added new Quick Add Module option from the edit bar. #4305 Thanks @donker
  • Added optional EasyImage upload in CK Editor plugins. #4405 Thanks @skamphuis
  • Added new Web Servers tab in Servers persona bar module. #4408 Thanks @donker
  • Made minimum username length configurable in Security --> Member Accounts --> Registration Settings. #2334 Thanks @skamphuis

Enhancements

  • Updated CK Editor version 4.15.1. #4383 Thanks @skamphuis
  • Updated Azure connector logo to current logo. #4442 Thanks @berkarslan-xo

Bug Fixes

  • Fixed an issue where it was impossible to create a page of type "file". #4387 Thanks @berkarsian-xo
  • Fixed an issue where page redirect always returned 301 (permanent) regardless of setting #4393 Thanks @mikesmeltzer
  • Brought back Mail.ConvertToText method that was accidently removed. #4396 Thanks @bdukes
  • Fixed an issue with PortalInfo.PortalId by removing a member that varied only by case and caused issues with case insensitive languages. #4397 Thanks @bdukes
  • Properly show errors as an error and not a success in log settings. #4399 Thanks @daguiler
  • Resolved an issue where new sites could not be created due to missing sitemap settings in the sites templates. #4415 Thanks @bdukes
  • Fixed a caching issue in TermsController. #4417 Thanks @mitchelsellers
  • Resolved issue with lowercase URL’s and account verifications. #4418 Thanks @mitchelsellers
  • Fixed an issue with DnnImageHandler when the filepath had mixed casing. #4421 Thanks @thienvc
  • Fixed an issue with the link popup in the new CK Editor version. #4427 Thanks @skamphuis
  • Fixed an issue where users where unable to upload files when there was an unexpected line break at allowable file extensions #4435 Thanks @mikebigun
  • Fixed an issue where sitemap priority was incorrectly defaulting to 0 for new pages instead of 0.5. #4441 Thanks @skamphuis
  • Fixed an issue where MailKit was missing BouncyCastle.Crypto reference. #4456 Thanks @mtrutledge
  • Fixed an issue that prevented Google Tag Manager to create scripts and delete connections. #4457 Thanks @skamphuis
  • Fixed an issue where BCC and CC where not applied on emails. #4473 Thanks @vmasanas
  • Adjusted mailkit provider to automatically handle TLS negotiation. #4479 Thanks @bdukes
  • Optimized images compression. #4480 Thanks @bdukes
  • Addressed a potential email parsing error. #4486 Thanks @bdukes
  • Removed samples folder from CKEditor. #4488 Thanks @bdukes

Developer Experience / Documentation

  • Added Dependency Injection to WebAPI Action Filters using Property Injection. #4161 Thanks @ahoefling
  • Added support for secure settings in settings serialization #4329 Thanks @donker
  • Added support for schema scripts in the scripts installer. #4367 Thanks @donker
  • Updated all license.txt files for module installers to be consistent. #4416 Thanks @mitchelsellers
  • Use pipeline artifacts instead of build artifacts. #4422 Thanks @bdukes
  • Enabled more automated tests. #4429 Thanks @bdukes
  • Enabled parallel running of Unit Tests. #4430 thanks @bdukes
  • Updated Cake to v1.0.0 #4433 #4470 Thanks @bdukes
  • Switched to using parameters instead of variables in build pipeline. #4440 Thanks @bdukes
  • Enabled deterministic builds on project libraries. #4450 Thanks @mitchelsellers
  • Added logging to Dependency Injection SafeGetTypes method. #4455 Thanks @mtrutledge
  • Improved build documentation. #4460 Thanks @donker
  • Deprecated unused delivered packages in Dnn.React.Common bundle to reduce its size. #4467 Thanks @valadas

Maintenance

  • Removed the unused json2.js from the codebase. #4206 Thanks @joshgk00
  • Updated to latest Roslyn CodeDOM provider. #4407 Thanks @bdukes
  • Removed unused languages in CK Editor DnnPages plugin. #4431 Thanks @skamphuis
  • Cleaned up now irrelevant parts of the web.config. #4449 Thanks @mitchelsellers
  • The moment js library reached end of life and there are continuous efforts to replace its multiple usages in the Platform with the lighter dayjs library. #4459 #4461 #4462 #4463 #4464 #4465 #4466 Thanks @david-poindexter
  • Added explicit values to all enums. #4474 Thanks @bdukes

List of Contributors

  • @bdukes Brian Dukes
  • @david-poindexter David Poindexter
  • @skamphuis Stefan Kamphuis
  • @mitchelsellers Mitchel Sellers
  • @donker Peter Donker
  • @mtrutledge Matt Rutledge
  • @berkarslan-xo Berk Arslan
  • @meetmandeep Mandeep Singh
  • @ahoefling Andrew Hoefling
  • @mikesmeltzer Mike Smeltzer
  • @valadas Daniel Valadas
  • @daguiler Daniel Aguilera
  • @thienvc OneDNN
  • @joshgk00 Josh Slaughter
  • @mikebigun Mikhail Bigun
  • @vmasanas Vicenç Masanas

Testing Team

Special thanks to the testing team led by @marietteknap.

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

MD5 checkusms

File

Chechsum

DNN_Platform_9.9.0_Deploy.zip

5801c083fdfc344fd239e4a58ab658a2

DNN_Platform_9.9.0_Install.zip

c0a0b64a44790261623f580fe7e4179e

DNN_Platform_9.9.0_Symbols

3f8100bd9e82d41a7d7818c67e5a08ba

DNN_Platform_9.9.0_Upgrade.zip

9cc7c5e3734004530b9529c0a9a3863d

v9.8.1

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues. A grand total of 81 pull requests by 18 contributors were processed for this release.

Noteworthy Changes in v9.8.1****Optional Telerik Removal

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the documentation for “Telerik Removal” on the DNN Docs site. This is optional but HIGHLY RECOMMENDED.

Bug Fixes

  • Fixed an issue where redirect after login would not work if the login page had a different name than login. #4171 Thanks @kmuralidaran
  • Fixed an issue where the country/region lists would show the id instead of the name when used by keyboard. #4192 Thanks @joshgk00
  • Fixed an issue where creating multiple pages would not properly validate for a valid parent page. #4197 Thanks @tauqeer-haider
  • Correct a wrong tooltip about SEO page priorities. #4198 Thanks @engineering87
  • Resolved all build warnings in Google Analytics Connector. #4209 Thanks @valadas
  • Removed impractical rule about merging pull requests. #4210 Thanks @david-poindexter
  • Resolves InvalidDataException in DFS environments when exporting sites. #4218 Thanks @zyhfish
  • Fixed an issue where the registration module would use the incorrect language. Thanks @berkarslan-xo
  • Fixed an issue with SCAYT getting the wrong language code. #4248 Thanks @tauqeer-haider
  • Fixed an issue where the data reader would not get disposed. #4258 Thanks @bdukes
  • Fixed an issue where the validation lines where incorrect for the new password field. #4301 Thanks @berkarsian-xo
  • Fixed DataProvider failures. #4302 Thanks @bdukes
  • Ensure properties in DTO objects use backing fields. This cause localization issues with serialization. #4312 Thanks @donker
  • Fixed AddContentItem Audit Trail for CreatedByUserId & LastModifiedByUserId. #4321 Thanks @ahoefling
  • Fixed an issue where Umlaut characters in URL caused module setting error. #4337 Thanks @berkarslan-xo
  • Fixed a wrong sitemap configuration on portal creation. #4342 Thanks @mitchelsellers
  • Reverted a commit that caused issues with language cookies. #4351 Thanks @bdukes
  • Fixed an issue where the AssemblyInstaller would fail removing a dll if it was already missing from disk. #4359 Thanks @dimarobert
  • Fixed an issue where Denying the ADD permission for a role on an asset would make it invisible to users on CKE Editor. #4364 Thanks @mikebigun

New features

  • Adds Page ID to the Page Management UI. #4240 Thanks @kieran23101
  • Added google tagmanager connector. #4255 Thanks @skamphuis
  • Implemented EnablePopups switch in portal settings PB module #4281 Thanks @donker
  • Added InjectModuleHyperlink and InlineEditorEnabled to the SiteSettings module. #4286 Thanks @donker

Enhancements

  • Ensures comments are only inserted when necessary in web.config. Thanks @rhaiamz
  • Changed WebConfigurationManager for ConfigurationManager allowing users to implement the connection string is AppService and remove it from the web.config. #4228 Thanks @davidjrh
  • Improved error message when uploading an invalid extension. #4257 Thanks @kmuralidaran
  • Prevents caching pages that are redirected. #4279 Thanks @tauqeer-haider
  • Removed dragover state from element when dragged between pages. #4325 Thanks @tauqeer-haider
  • Updated the monaco font so it uses a monospace font. #4345 Thanks @bdukes
  • Removed “Running Default” check from Default.aspx. #4347 Thanks @mitchelsellers
  • Avoids checking user permissions if there is no user. #4356 Thanks @bdukes

Developer Experience / Documentation

  • Resolved multiple stylcop warnings in Library and HttpModules projects. #4194 thanks @valadas
  • Cleaned up UserProfile Class. #4195 Thanks @valadas
  • Fixed all build warnings in Console module. #4203 Thanks @valadas
  • Resolved 1793 build warnings in Library project. #4204 Thanks @valadas
  • Removed Module Creator from main distribution. #4208 Thanks @valadas
  • Resolved some build warnings in the ImportExport project. #4211 Thanks @valadas
  • Resolved 249 build warnings in Library project. #4215 Thanks @valadas
  • Resolved 101 build warnings on CoreMessaging project. #4216 Thanks @valadas
  • Resolved some build warnings in DDRMenu Project. #4224 Thanks @valadas
  • Moved UserMode from PortalSettings to Personalization class. #4225 Thanks @valadas
  • Updated .NET & SQL requirements in InstallWizard localization files. #4226 Thanks @joshgk00
  • Moved things deprecated in v9 to be removed in v11 instead of v10. #4230 Thanks @valadas
  • Resolved all build warnings in RazorHost project #4231 Thanks @valadas
  • Resolved some more build warnings on library project #4236 #4243 Thanks @valadas
  • Deprecated IEventLogController in favor of DI. #4244 Thanks @valadas
  • Relaxed compile warnings on Tests projects. #4245 Thanks @valadas
  • Resolves multiple build auto-fixable warnings in solution. #4246 Thanks @valadas
  • Fixed DevOps build badge. #4249 Thanks @bdukes
  • Fixed some integartion tests. #4250 Thanks bdukes
  • Removed deprecation for some DataProvider methods. #4259 Thanks @bdukes
  • Marked EnableSkinWidgets as obsolete and remove from serialization. #4287 Thanks @donker
  • More stylecop fixes on DotNetNuke.Web project. #4293 Thanks @valadas
  • More stylcop warnings fixes on library project #4294 Thanks @valadas
  • Updated issue templates after 9.8.0 release. #4315 Thanks @bdukes
  • Migrated build orchestration runner for Cake.Frosting #4322 Thanks @bdukes and @valadas
  • Fixed a missing reference that caused builds to fail. #4326 Thanks @bdukes
  • Updated build configuration to you YAML file in repository. #4327 Thanks @bdukes
  • Adjusted included branches for Azure pipelines. #4330 Thanks @valadas
  • Updated build documentation for Cake v1 changes. #4339 Thanks @david-poindexter
  • Updated vsdoc file for jQuery 3.4.1. #4341 Thanks @bdukes
  • Deprecated several anti-patterns. #4349 Thanks @mitchelsellers
  • Updated upgrade package build so it won’t reinstall Telerik on de-Teleriked instances. #4350 Thanks @valadas
  • Improved a test that had intermitent failures. #4365 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” for the test projects. #4366 Thanks @bdukes
  • Removed some duplicate references. #4368 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in Dnn.EditBar.Library #4369 Thanks @bdukes
  • Resolved some warnings in DnnExportImportLibrary. #4370 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in SimpleWEbFarmCachingProvider. #4371 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in 3rd party auth providers
  • Fixed build warnings in DnnExportImport. #4373 Thanks @bdukes
  • Fixed build warnings in CKEditorProvider. #4374 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in CKEditorProvider. #4375 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in ContryListBox. #4376 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in AspNetClientCapability #4377 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in ModulePipeline. #4378 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in Azure Connector. #4379 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in GTM Connector. #4380 Thanks @bdukes
  • Enabled “Treat Warnings as Errors” in HTML Editor Manager. #4381 Thanks @bdukes

List of Contributors

  • @bdukes Brian Dukes
  • @valadas Daniel Valadas
  • @donker Peter Donker
  • @tauqeer-haider Tauqeer Haider
  • @mitchelsellers Mitchel Sellers
  • @berkarslan-xo Berk Arslan
  • @david-poindexter David Poindexter
  • @joshgk00 Josh Slaughter
  • @kmuralidaran Muralidaran Kuppusamy
  • @dimarobert Robert Dima
  • @ahoefling Andrew Hoefling
  • @zyhfish Ben
  • @mikebigun Mikhail Bigun
  • @skamphuis Stefan Kamphuis
  • @davidjrh David Rodríguez
  • @engineering87 Francesco Del Re
  • @kieran23101 Kieran Corkin
  • @rhaiamz Popescu Cristian

Additional Resources.

Is this your first time installing or upgrading DNN? If so, you can find some help with the installation and upgrade wiki articles. If this is your 100th time upgrading DNN, maybe review the guides and submit a few changes!

MD5 Checksums

File

Checksum

Dnn_Platform_9.8.1_Deploy.zip

C2AEC920BAF8EDDDDA9F113D876E1C78

Dnn_Platform_9.8.1_Install.zip

CA3C48F823B6F610EF71ABA24DAEF472

Dnn_Platform_9.8.1_Upgrade.zip

68486E476910903D9C4EA209C5F9833F

Dnn_Platform_9.8.1_Symbols.zip

A9BEEF56935CE7E66103092AC323D5D5

v9.8.0

Release Notes

We’d like to first thank everyone from the community who has submitted pull requests or reported issues. A grand total of 84 pull requests by 14 contributors were processed for this release.

Noteworthy Changes in v9.8.0****Optional Telerik Removal

The major highlight for the DNN 9.8.0 release (and above for the 9.x series of releases) is that we removed all our dependencies on the Telerik library. In order to not make this a breaking change, we do leave Telerik removal as a manual option until v10. The main components that still relied on Telerik were Site Assets and Global Assets, which used the Digital Assets Manager. We ship a new file manager with v9.8.0 (and above for the 9.x series of releases) that has no dependencies on Telerik, but it is not installed by default so that it will not break existing sites upon upgrading. Please note it will be automatically replaced in v10, so please test and plan accordingly.

To identify any third-party extension(s) that depend on Telerik, our very own Mitchel Sellers has published the DNN Telerik Identifier module which you can download and install to find assemblies that reference Telerik. Carefully review the results from this module to determine if your website is ready for full removal of Telerik. For any third-party modules that depend on Telerik, you should contact the module vendor/developer before following the steps below.

If you would like to remove Telerik in DNN 9.8.0 (and above for the 9.x series of releases), please visit the “Telerik Removal” documentation on DNN Docs. Again, proceed with caution based on your findings using the DNN Telerik Identifier module above, as performing these steps may also break third-party extensions that depend on Telerik. We recommend you contact the developer/vendor in these cases for further guidance.

Bug Fixes

  • Fixed an issue where newly created sub-folder was not shown if the parent folder name starts with 0 #3976 Thanks @kmuralidaran
  • Fixed an issue where the module friendly name was not updated as part of module extension update #4082 Thanks @tauqeer-haider
  • Fixed an issue where is was not possible to set page permissions for “unauthentication users” role #4094 Thanks @zyhfish @bdukes @mitchelsellers
  • Fixed a styling issue for checked Accept License checkbox in Extension installer #4103 Thanks @david-poindexter
  • Fixed an issue where the React common components would interfere with container css class #4109 Thanks @valadas
  • Fixed an issue where module dialog added new module to wrong pane #4113 Thanks @bdukes
  • Fixed an issue where the incorrect icon would show for errors in the Pages module #4124 Thanks @tauqeer-haider
  • Fixed an issue where Dnn would not install due to a missing config file #4136 Thanks @valadas
  • Fixed an issue where some Visual Basic modules would fail due to members that differed only by case #4139 Thanks @bdukes
  • Removed beacon setting on upgrade #4141 Thanks @bdukes
  • Fixed an issue with module pane placement after export/import #4144 Thanks @tauqeer-haider
  • Fixed an issue where 09.07.03.config was not included in the project #4151 Thanks @valadas
  • Fixed an issue that would cause an infinite redirect loop on mobile #4158 Thanks @valadas
  • Fixed an issue where some dates where not parsed with invariant culture which caused issues for non-Gregorian calendars #4164 Thanks @tauqeer-haider
  • Fixed an issue where the Event Log would fail silently during application startup #4178 Thanks @ahoefling
  • Fixed an issue where page title and description would get saved with site values unintentionnally #4184 Thanks @mitchelsellers
  • Fixed an issue with profile image visibility #4185 Thanks @tauqeer-haider
  • Fixed an issue where line breaks and year tokens would not be properly formatted in Social Messaging #4186 Thanks @hismightiness
  • Ensure new Localization HTTP module is running soon enough #4251 Thanks @bdukes
  • Remove Localization HTTP module from config #4264 Thanks @bdukes
  • Fix Localization Issues in WebAPI #4265 @donker
  • Fix the web.config errors for the new Localization module #4267 @donker

New features

  • Implemented a new optional file manager called Resource Manager #4152
    • Resource Manager base code contributed as open-source by DNN Corp. Thanks @zyhfish @ashishpd
    • Ensure yarn runs when module is built #3726 Thanks @donker
    • Fixed resource manager to use the revised upload file handler in the core #3727 Thanks @donker
    • Resource Manager Standardization & Improvement #3734 Thanks @mitchelsellers
    • Made the resource manager build as the other projects #3799 Thanks @valadas @donker
    • Fixes to upload logic in resource manager #3853 Thanks @donker
    • Update file upload validation for hosts #3855 Thanks @daguiler
    • Implemented file/folder move in resource manager. #4149 Thanks @valadas
    • Multiple rebases and merge conflict resolutions to keep feature branch up to date. #3907 #4006 #4056 #4106 #4134 #4150 Thanks @valadas @donker
    • Implemented better wildcard support for file search. #3962 Thanks @david-poindexter
    • Optimized WildcardToRegex for file search. #3963 Thanks @david-poindexter
    • Fixed an issue with services framework usage in the permission grid. #4007 Thanks @valadas
    • Implemented saving of permissions grid changes. Thanks @donker
    • Removed SVGs from resource-manager build. #4024 Thanks @valadas
    • Resolved all frontend build warnings in resource-manager. #4025 Thanks @valadas
    • Fixed 2 wrong svg import syntax in resource-manager. #4026 Thanks @valadas
    • Added folder providers configuration support to resource-manager. #4061 Thanks @valadas
    • Created drowpdown for refresh/sync and restyled. #4063 #4072 Thanks @david-poindexter
    • Fixed about 1000 stylecop warnings in resource-manager. #4065 Thanks @valadas
    • Configured tylecop properly, fixed remaining warnings and enabled TreatBuildWarningsAsErrors for the resource-manager project. Thanks @ahoefling @bdukes @valadas
  • Adds host setting option and ability to use settings outside module context #4153 Thanks @donker
  • Adds support for editing the robots.txt on a website #4165 #4172 Thanks @hismightiness
  • Fixed an issue where all emails where missing the body. #4285 Thanks @valadas
  • Fixed an issue where new users would have no preferred locale. #4284 Thanks @valadas

Enhancements

  • Implemented Email Provider support #3969 Thanks @meetmandeep
  • Added support for C# Async Constructs During Page Rendering #3984 Thanks @bdukes
  • Fixed a UI alignment issue with Search Results #4074 Thanks @kieran23101
  • Replaced momentjs with dayjs in Servers.Web #4104 Thanks @david-poindexter
  • Replaced momentjs with dayjs in Users.Web #4108 Thanks @david-poindexter
  • Removed all unused code from Upgrade/Installer Code #4119 Thanks @mitchelsellers
  • Removed the Improvement Program #4121 Thanks @mitchelsellers @valadas
  • Added a scheduled task to purge Expired JWT tokens #4126 Thanks @donker
  • Added portal name to SMTP test email for better identification #4131 Thanks @david-poindexter
  • Swapped CodeMirror for Monaco Editor (Visual Studio Code editor)
    • Swaped CodeMirror in CssEditor for monaco-editor #4133 Thanks @david-poindexter
    • Swap CodeMirror in SqlConsole for monaco-editor #4170 Thanks @david-poindexter
    • Swap CodeMirror in ConfigConsole for monaco-editor #4173 Thanks @david-poindexter
  • Removed Telerik references #4142 Thanks @bdukes
  • Added personaBarContainer css class together with incorrect personalBarContainer #4160 Thanks @hismightiness
  • Lowercases the meta tag names in rendered html #4176 Thanks @hismightiness
  • Updated DDR Menu to be System Package and prevent accidental uninstallation #4180 Thanks @mitchelsellers
  • Fixed an issue where modules without a minifest would not follow Dnn versioning #4183 Thanks @mitchelsellers
  • Refactored JWT provider code #4276 Thanks @thienvc and @valadas
  • Upgrade optional packages when they’ve already been installed #4277 Thanks @donker

Developer Experience / Documentation

  • Merged CKEditor Provider in our main repository #4096 Thanks @bdukes
  • Adjusted build scripts to build CKEditor as our other projects #4105 Thanks @valadas @bdukes
  • Improved developer experience for upcoming Telerik Removal #4110 Thanks @mitchelsellers
  • Improved DNN Platform repository Documentation #4115 Thanks @mitchelsellers
  • Removed references to the Dashboard Project Type #4117 Thanks @mitchelsellers
  • Code Quality
    • Treat warnings as errors for DotNetNuke.Instrumentation #4122 Thanks @bdukes
  • Updated mergeable to not allow merging of PRs with Future:… milestone #4127 Thanks @david-poindexter
  • Fixed a React invariant violation #4129 Thanks @bdukes
  • Adds IEventLogger to Dependency Injection #4159 Thanks @ahoefling
  • Fixed an MSBuild issue with Dnn.PersonaBar.Extensions #4179 Thanks @david-poindexter
  • Marked all Webslice member as obsolete #4182 Thanks @mitchelsellers
  • Added ISerializationManager for Dependency Injection #4087 Thanks @ahoefling
  • Enabled Dependency Injection for IServiceRouteMapper #4155 Thanks @bdukes
  • Introduced MailAttachment class to prevent introducing a breaking change soon with support for mail providers. #4187 Thanks @bdukes
  • Updated release schedule documentation #4188 Thanks @mitchelsellers @david-poindexter @bdukes

List of Contributors

  • @valadas Daniel Valadas
  • @bdukes Brian Dukes
  • @david-poindexter David Poindexter
  • @mitchelsellers Mitchel Sellers
  • @donker Peter Donker
  • @tauqeer-haider Tauqeer Haider
  • @ahoefling Andrew Hoefling
  • @hismightiness Will Strohl
  • @zyhfish Ben
  • @daguiler Daniel Aguilera
  • @meetmandeep Mandeep Singh…

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907