Skip to content

0.5.5 - Security preflights, hardening guide, business vocabulary, FLP intents, IDP login

Choose a tag to compare

View all tags
@CyrilM29 CyrilM29 released this 16 Jul 09:04
v0.5.5
3160293

🇫🇷 Version « packaging & distribution » : le pack Windows rattrape la passe de hardening sécurité de juillet et les nouveaux keywords d'entreprise (vocabulaire métier, navigation FLP par intent, login IDP). Tout voyage dans le wheel — dézippez, install.cmd, c'est prêt.

What's new in the pack

Security / environment preflights — three read-only keyword pairs verify the posture of the test environment and name the exact setting to fix:

  • Scripting Should Be Fully Enabled — server-side scripting posture (RZ11), incl. the per-user confinement path (user_scripting_per_user + S_SCR).
  • Abap List Should Be Readable — detects classic ABAP lists rendered as an opaque shell and names the SAP GUI accessibility mode to provision.
  • Client Security Should Be Hardened — SAP GUI client patched vs CVE-2025-0055 (input-history weak encryption, fixed from 8.00 PL9) and leftover SAPHistory*.db databases to purge.

See the new « Environment preflights » section in the pack README (EN/FR).

Enterprise keywords (new)

  • Lookup Business Term (both libraries) — FR/EN business terms resolve to the ABAP field/table; ambiguity is always refused with the candidate list, never a silent first match.
  • Open Fiori App — Fiori launchpad navigation by SemanticObject-action intent hash: stable across catalog reorganizations, themes and languages.
  • Log In Via Identity Provider — SAP IAS / Azure AD / generic login forms, single-page and two-step flows detected dynamically, password never logged.

Robustness proven by new smokes (in the source repo's CI): UI5 1.136 legacy-free, strict-CSP injection (no CSP relaxation needed on the system under test), Work Zone iframe scenarios.

Numbers

  • 669 automated unit tests, 94% measured coverage (85% CI floor)
  • Libraries and distributions at 0.5.5 (Apache 2.0)

Install

Unzip sapfx-pack-0.5.5-win.zip, then:

install.cmd                 REM libraries only (ECC + Fiori + API)
install.cmd -WithMcp        REM + rf-mcp plugins & agent workspace
install.cmd -WithBrowsers   REM + Playwright Chromium

Full instructions in the pack's README.md / README.fr.md.

The source repository is private — access on request: cyril@montiel.me

Assets 3
Loading