Skip to content

@salesforce-org-metaci salesforce-org-metaci released this Nov 11, 2020 · 2 commits to master since this release

Critical Changes

We introduced a new validation rule, ValidateExternalSignupUrl, on the Volunteer Job object. This rule ensures that the External Signup URL field doesn’t contain malicious code by validating that the field value begins with http, https, or mailto.

If this field has an invalid value, it will impact your ability to update the Volunteer Job record, and affect your volunteers' ability to report hours or update data on your Volunteer site. Therefore, we recommend that you check your External Signup URL field values on the Volunteer Job object and ensure that they comply with the new requirement. To get a list of your External Signup URL field values:

  1. Create a custom report using the Volunteer Jobs with Shifts & Hours report type.
  2. Add External Signup URL as a column.
  3. Add a filter for External Signup URL, with the Operator set to Does not contain, and the value set to http,https,mailto.

If you run into major issues, you can deactivate the new validation rule and create your own. Please keep in mind that if you disable the validation rule, you could be opening up your org to security issues.

Changes

  • Addressed security issues on the PersonalSiteContactInfo page.

Installation Info

Sandbox & Scratch Orgs:
https://test.salesforce.com/packaging/installPackage.apexp?p0=04t1T000000Ey6yQAC

Production & Developer Edition Orgs:
https://login.salesforce.com/packaging/installPackage.apexp?p0=04t1T000000Ey6yQAC

Assets 2
You can’t perform that action at this time.