Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Power Pages version 9.8.9.x is now available. This article describes the bug fixes and updates that are included in this release.
The following list details issues that are resolved/updated in this update.
Accessibility
- Improved accessibility of the Manage External Authentication dialog by adding a localized screen-reader label to its close button across Bootstrap 3 and Bootstrap 5 themes.
Functionality
- Prevented disabled contacts from being silently reactivated through external email-based sign-in; a validated invitation for the same contact is now required.
- Fixed private-mode sign-in redirects so return URLs containing query parameters are preserved correctly.
- Restored Microsoft Entra ID sign-in by deploying the cryptography dependency required by the updated identity libraries.
- Strengthened Web API wildcard protection, including blocking wildcard table access at the most restrictive protection level and validating wildcard field configuration.
- Added safer wildcard-deprecation handling by supporting configured exceptions and using saved-view columns when requests omit an explicit select list.
- Blocked disabled legacy OData endpoints from being reached.
- Prevented Server Logic from invoking privileged Dataverse operations that could alter permissions, teams, workflows, or solutions; administrators can extend the built-in deny list.
- Blocked linked-table search in entity lists by default because of known security and performance risks.
- Prevented entity-list search failures when choice, status, or multi-select metadata contains missing option sets or localized labels.
- Fixed missing citation titles for adapted Power Pages records and ensured citations retain a usable title fallback.
- Improved throttling identity selection for authenticated and anonymous Copilot users to provide more consistent request handling.
- Server Logic can now invoke unbound Dataverse Custom APIs and Custom Functions through a dedicated, permission-hardened execution path.
Library Upgrades
NA
New Features
NA