verbb/formie 4.0.6

on GitHub

Added

• Add “All Form Fields”, “All Non Empty Fields”, “All Visible Fields” and formatted Group and Repeater summaries to integration field mappings for text fields. Freshdesk ticket descriptions receive them as HTML. (#3078)
• Add IntegrationField::$acceptsHtml for integration fields that render HTML content. (#3078)
• Add instructions explaining the Redirect Source options in form behaviour settings.
• Add field warning for URL settings in the control panel, when the URL starts with a reference.

Changed

• Allow reference-supplied external redirect URLs, leaving the choice of destination source to the editor.
• Update the minimum Tiptap requirement to 1.0.6.

Fixed

• Fixed an information disclosure vulnerability. (#3074)
• Fixed a moderate-severity cross-site scripting vulnerability. (GHSA-544h-97wp-pvhx)
• Fix rich-text Multi-Line Text answers displaying as HTML source when referenced in email notifications.
• Fix rich-text editor registration running more than once when Craft’s buildId setting is configured.
• Fix garbage collection failing when pruning Formie submissions, sent notifications or uploaded assets. (#3075)
• Fix form group permissions not applying to email notification Advanced and Templates tabs, the New Submission form list, the Recent Form Submissions widget, and sent notification sources, actions and resending.
• Fix the cursor jumping to the end when typing around variable tags.
• Fix browser requests failing when Craft uses a custom action trigger, including token refresh after AJAX submissions. (#3068)
• Fix file upload reference checks causing MySQL sort-memory errors for large submissions. (#3069)
• Fix upload manager file order and move button states becoming inconsistent after reordering files. (#3070)
• Fix searchable dropdown placeholders not appearing until a form field is focused. (#3072)
• Fix client-rendered forms failing to load when Date fields contain dropdown controls, including AM/PM controls. (#3073)
• Fix Date pickers displaying calendar labels in English on non-English sites. (#3076)
• Fix required advanced Date pickers being skipped by client-side validation. (#3077)
• Fix Date fields showing Required settings that were reset on save. Set Required on the Date's sub-fields instead. (#3077)
• Fix invisible hCaptcha challenges timing out before they could be completed, requiring a second submit click. (#3067)
• Fix Agree fields not being selectable in integration field mappings. (#3066)
• Fix the Opt-In Field setting for integrations not being able to be cleared. (#3066)
• Fix large HubSpot portals failing to load or refresh integration settings due to the metadata storage limit.
• Fix optional field selections, including Match Field and integration field references, not being able to be cleared.
• Fix country defaults for Phone, Address Country and Google address autocomplete not being able to be cleared.
• Fix Phone country dropdowns selecting the first allowed country when the default is None, and not restoring None when forms reset. (#3071)
• Fix optional option-source parameters not being able to be cleared, and provider defaults restoring explicitly empty values.
• Fix Form Default positions not being retained for Address and Name instructions, and Content, HTML, Recipients, Quiz and Survey labels.
• Fix deleted page client events returning on forms upgraded from legacy event settings.
• Fix clearing custom required error messages reverting to their previous value. (#3065)
• Fix populating Entries and other element fields with a single element ID.
• Fix forms on path-based sites receiving refreshed submission tokens for the wrong site. (#3064)
• Fix Microsoft Dynamics 365 requests failing with a provider origin override error. (#3063)
• Fix theme attributes not being applied to AJAX success and error messages. (#3061)
• Fix nested alert roles in form error messages that could cause duplicate screen reader announcements. (#3062)
• Fix AJAX submissions showing the form error message when Error Message Position is set to None.
• Fix Opayo re-tokenizing cards and requesting unnecessary merchant sessions after completing a 3D Secure challenge. (#3048)
• Fix importing Formie 3 forms with a null redirect target. (#3060)
• Fix variable pickers not showing for redirect URL settings.

Removed

• Remove the completionRedirectAllowedOrigins configuration setting.