v3.5.0

New features:

• Hide actions which user does not have permissions to execute #1022

Enhancements:

• Bump GWT from 2.8.3 to 2.9.0 #1549
• REST API: Tranferred resource reindex better error mapping #1547
• Default ingest plugin generalization #1484
• Job report list consistency #1328
• Improve default ingest plugin final states #1300

Security Fixes:

• Blocking URL redirection from remote source (CWE-601)
• Guarding against "Zip Slip"
• Fixed information exposure through stack trace
• Guarding against cross-site scripting (CWE-79)

Bug Fixes:

• AntivirusPlugin version command polluted by warning #1548
• Siegfried task on SIP update optimization not working #1536
• API create/update descriptive metadata is failing #1516
• Greater than 100% progress on deletion of a list of AIPs in some cases #1506