Power Pages version 9.8.8.x Release Notes


Power Pages version 9.8.8.x is now available. This article describes the bug fixes and updates that are included in this release.

The following list details issues that are resolved/updated in this update.

Accessibility

  • Submitting a form now announces its processing state, so screen reader users know the action is in progress.
  • Applying and clearing list filters is now announced correctly to assistive technology.
  • List and collection item positions are now announced correctly to screen reader users on Android.
  • Focus is now placed correctly on the invitation redemption flow, download actions expose the correct role to assistive technology, and the close button meets colour-contrast requirements.

Functionality

  • Accurate session-expired messaging in list search: When a session expires during a list search, the portal now tells the user their session has expired instead of showing a misleading connectivity error.
  • Reliability and performance improvements across the portal runtime: A set of under-the-hood improvements reduces resource consumption, improves responsiveness under sustained load, and prevents long-blocked requests from hanging.
  • Quick view forms: Quick view forms no longer collapse when rendered in current versions of Chrome.
  • Intelligent Charts: Chart rendering no longer fails when the underlying chart view cannot be resolved; an empty state is shown instead.
  • Date picker: Selecting certain dates no longer causes the date picker to error.
  • Search results: Web pages marked as excluded from search in Enhanced Data Model (EDM) are now correctly omitted from search results.
  • Content security policy configuration: An intentionally empty content security policy setting is now honored instead of silently falling back to the default.
  • Agent and chat endpoints: Authorization failures on these endpoints now return an appropriate HTTP error status instead of redirecting, so client integrations can handle them correctly.
  • Content sanitization — Sanitization of HTML content delivered to portal visitors has been strengthened, including sanitization of user display names used in chat greetings.
  • Response hardening — Sensitive and streamed responses are no longer cached by browsers or intermediaries, and internal portal identifiers, version details, and exception detail are no longer exposed in diagnostic responses.
  • Automated crawler protection — The highest-volume AI and large-language-model crawlers are now blocked at the web server layer, reducing unwanted automated traffic and bandwidth consumption on portals.
  • OData filter site setting: The DisableOdataFilter site setting is no longer honored for new sites or existing sites that hadn't used the setting by August 11, 2026.
  • Web API field configuration: Support for the wildcard value (*) in the Webapi/<table-name>/fields site setting is deprecated. Explicit fields must be specified directly or through a Dataverse view named Power Pages Web API Columns by setting Webapi/<table-name>/UseFieldsFromView to True.
  • Web API wildcard detection: Site Checker now warns when Webapi/<table-name>/fields site settings contain a wildcard (*) and identifies the affected site settings.

Library Upgrades

  • Upgraded HtmlSanitizer from 4.0179 to 7.1.509
  • Migration: PnP Sites Core to PnP Framework 1.17

New Features

  • Custom JavaScript for modern lists: Makers can now attach custom JavaScript to modern list controls, enabling tailored client-side behavior on list pages without replacing the control. This is enabled by default in this release.
  • Cloud flow triggers in Server Logic: Server Logic can now trigger Power Automate cloud flows directly, allowing makers to start automated business processes from server-side logic.
  • Microsoft Entra ID sign-in for the live chat widget: The Omnichannel live chat widget on Power Pages now supports Microsoft Entra ID authentication.