Repository navigation
Release Notes: ABCD v4.1.0
We are pleased to announce the release of ABCD v4.1.0. This version brings important improvements to stability, security, new data import features, plugin management, and general optimizations to the updater and user interface.
New Features and Highlights
Header-Based Text Imports (#779)
- Added support for loading CSV/TSV files with encoding selection.
- Introduced a conversion-table mode that maps header names directly to fields, including support for repeated occurrences.
- Implemented unmatched column reporting and added localized interface text.
Plugin Management and Compatibility (#782)
- Added ABCD version compatibility checks for plugins.
- The system now displays version requirements and compatibility warnings, blocking incompatible installations and activations.
- Improved plugin manager error handling with new translated messages.
Data Entry Hooks (#781)
- Exposed extension hooks for the data entry toolbar search area and the page footer.
Search Term Expansion (#780)
- Multiword search terms are now split, applying the configured field prefix to each unqualified word and joining adjacent terms with the ISIS AND operator, while preserving explicit operators and existing prefixes.
Update System, Lifecycle, and Migration
Updater Self-Update (#772)
- Added a pre-download check that safely validates and replaces the update manager when a newer release is available.
- Standardized batched update statuses and fixed migration script discovery.
Lifecycle and Migration (#771)
- Prevented extract-loop hangs and restored the protected config across partial-update batches.
- Improved v4 config migration checks and localized update-manager and migration messages (English, Spanish, French, and Portuguese).
Progress and Text Encoding (#775)
- Normalized update logs and release notes for reliable UTF-8 display.
- Capped progress below completion during source installation and added elapsed time tracking for slow requests.
- Added a cleanup announcement before removing temporary files so the update remains visibly active.
Security and Fixes
CloudAV False Positive Fix and API Hardening (#776, #777)
- Refactored
central/settings/api_manager.phpto eliminate theSMW-INJ-CLOUDAV-php.dropper.content_include-PHPTRP2-4heuristic false positive triggered by CloudAV / Imunify360 malware scanners on Linux hosting environments. - Strict Extension Whitelist: Added explicit validation using
basename()andpathinfo(..., PATHINFO_EXTENSION)sofile_put_contents()only writes.i2xand.pftfiles inside/resources/mappings/, preventing arbitrary file extensions. - Safe Config Generation: Refactored how API configuration files are written and loaded so the script no longer interpolates
$_POSTparameters into raw<?phpstrings.
General Adjustments
- Removed the MAX_TMP_STRING parameter (#778): This parameter does not exist in the CISIS binary build. For UTF-8 binaries, its presence in
.xisscripts caused errors. Thebuffersizeparameter alone is sufficient. - Layout Fix (#773): Set a 350px maximum width for the database heading select, fixing layout breaks when a database has a very long name.
- Preserve Return Script (#773): Added a hidden
backtoscriptfield in the JSON export form so the configured return destination is properly submitted.
What's Changed
- fix(api): prevent CloudAV heuristic false positive and harden file validation in api_manager.php by @rogercgui in #777
- Remove the MAX_TMP_STRING parameter by @rogercgui in #778
- Support header-based text imports by @rogercgui in #779
- Expand search terms into prefixed AND clauses by @rogercgui in #780
- Add data entry toolbar and footer hooks by @rogercgui in #781
- Check ABCD version compatibility for plugins by @rogercgui in #782
- Bump version to v4.1.0 by @rogercgui in #783
- Remove Bootstrap source map reference by @rogercgui in #784
Full Changelog: v4.0.2...v4.1.0