Release Notes - 2.3

---

2.3.14-funcrel

Stability

Customer Ticket Id	Customer Details
	Fixes never ending analysis

Fixes/Bugs

Customer Ticket Id	Customer Details
	Repairs some resolution coming from modules inside self invoking functions
	Eliminates following files from files to be skipped by analysis: "assets/js/app.js" and "assets/js/module.js"

2.3.13-funcrel

Stability

Customer Ticket Id	Customer Details
54906	Fixes crash during light parsing.

Fixes/Bugs

Customer Ticket Id	Customer Details
54880	Fixes missing http ressources when using "kendoGrid" with dataSource defined with "new kendo.data.DataSource(…)"
	Fixes some missing links when "define([…], function () {})" is used.
	Fixes missing links when lodash "merge" and "cloneDeep" functions are used
	Fixes missing links when lodash "flow" function is used.
	Fixes some links when "require" or "import" statements are present in code.

2.3.12-funcrel

Fixes/Bugs

Customer Ticket Id	Customer Details
54592	Fixes missing http request when an url is set through <object>.setAttribute('action', 'my_url')
54647	Fixes missing http request when Kendo is used through AngularJS framework in html files
54582	Fixes missing http request when Kendo is used through AngularJS framework in html files
	Fixes bad evaluations in some rare cases

Enhancement/Improvements

Customer Ticket Id	Customer Details
	Removes BuildLog.htm (Visual Studio logs) from analysis to improve results.

2.3.11-funcrel

Fixes/Bugs

Customer Ticket Id	Customer Details
	Repairs missing links from Apache Tiles Definitions to other Defintions and links from these definitions to struts operations through resource services.
	Repairs some missing urls when code is splitted between javascript and typescript.
	Repairs some missing resource services when setAttribute("src", url) is called on a DOM element of "iframe" type.
	Repairs some missing resource services when Kendo UI data source is used.
53812	Repairs urls for some axios resource services when these urls where empty.
53656	Repairs missing links from cshtml files to js code when "~" is present in "src" script attribute
53657	Repairs missing resource services when kendo framework is used with the "nameof" razor operator.

2.3.10-funcrel

Fixes/Bugs

Customer Ticket Id	Customer Details
	Fixes links when there are several possibilities of a called function and this is not the "nearest" file which is selected.
53343	Prevents analyzer from crashing in some cases when .aspx files contain vbscript code.
	Repairs the resolution inside some HTML fragments inside reactjs .js files
	Repairs links when resolution is bad.
	Repairs the html attribute sent to other extensions when an attribute starts with "@" (ex: @success="onSaveEdit").
	Repairs url evaluations when "switch" blocks are involved (it should work like "if" blocks).
	Repairs the number of parameters of some rare anonymous functions which is twice the good value.
53012	Prevents analyzer from crashing in some rare cases when a variable v is initialized with a function call of this kind v.withUrl(…) (same name v, and "withUrl" containing "url" word)
53119	Repairs missing links from anonymous functions when anonymous function code is "builder => ({getT:f()})"
	Fixes positions of resource services whose urls are constructed using shorthand addition.
	Repairs badly formed urls of some resource services.
	Eliminates resource services which have very similar urls (url part differing after ?).
	Fixes multiple incorrect links from .js files when the resolution should be local
	Fixes multiple incorrect links from .jsp files when include statement is done through a complex "script.src" value
	Fixes multiple incorrect links from .asp/.aspx files when the include statement has no corresponding case sensitivity.
	Fixes multiple incorrect links from .jsp files when the include statement is in a .inc file included by the .jsp file
	Fixes missing knockout views when two views with same name are in the same file

New Support

Customer Ticket Id	Customer Details
	Supports "useSWR" of SWR of React Hooks library for data fetching
	Supports .jsi source files

Enhancement/Improvements

Customer Ticket Id	Customer Details
	Improves performance by skipping some libraries or build folders via the filters.json file.
	Improves links to anonymous functions: links should start where functions are defined.

2.3.9-funcrel

Fixes/Bugs

Customer Ticket Id	Customer Details
	Fixes missing include links from .cshtml files to .js files when the .js files are contained in a "wwwroot" sub folder.
	Repairs the url of an Ajax call present in a .js file when the url is defined through a variable initialized in a .cshtml file.
	Fixes missing link between two .razor files when the link is in a "href" attribute.
	Fixes missing link between two aspx files when the first one points to the second one through a local server URL.
	Fixes missing Razor Method Call objects when several identical calls are present in the same file.

New Support

Customer Ticket Id	Customer Details
	Adds support of "Html.Kendo().Upload().Async(…)": links are now created to corresponding dotnet controller actions through Razor method call objects
	Adds support of .ascx files
	Adds support of "fetch", "create", "save", "destroy" calls in Backbone.js context for the creation of http resource services.
	Adds support of "Backbone.sync" in http resource service creation.

Enhancement/Improvements

Customer Ticket Id	Customer Details
	Adds a link from a .cshtml file created by dotnet analyzer to the .cshtml file content created by html5 one.
	Improves security by removing some vulnerable documentation files.
	Improves resolution when "Object.defineProperties" is used.
	Improves performance by skipping some libraries or build folders via the filters.json file.
	Refines names of anonymous functions defined with an arrow: they have now a more explicit name than NONAME.

Performance

Customer Ticket Id	Customer Details
	Optimizes html files resolution by skipping files when they are supposed very near by their names (my_file.html and myfile–tablet.html, my_file–phone.html: only the first one is analyzed).

2.3.8-funcrel

Resolved Issues

Customer Ticket Id	Details
52019	Fixes an issue causing missing HTML5 http requests services (found through specific "fetch" client function) - this is a regression since 2.1.18.

Other Updates

Details
Integrate handling of 'request-promise', 'request-promise-any', 'request-promise-native' in HTML5 instead of nodejs.
The filters.json file has been updated to ensure that various external libraries are now automatically skipped during the analysis.
A minor change to modify the description and name of the "HTML5 External Library" object.
Fixes an issue causing links from .vue, .html… files to not be present for code inside "pug" sections.

2.3.7-funcrel

Other Updates

Details
The filters.json file has been updated to ensure that various external libraries are now automatically skipped during the analysis.
Fixes an issue causing problems with .html, .jsp files: analysis of these file types sometimes results in an incorrect Lines of Code count.
A minor update to ensure the "async" keyword is part of the method "ast" method.
Added support of JavaScript decorators during JavaScript parsing (a technical update to facilitate future changes).
Fixes a traceback error in the analysis log: "AttributeError: 'list' object has no attribute 'get_global_class'".
Fixes an issue causing some call links to callback objects to be missing when several calls are present.
Fixes an issue causing some call links to be missing due to file analysis order.

New Support

Summary	Details
Support JSTL sql tag	Added support for client/server calls from JSP to Database, see Notes.
Blazor support (.razor files)	Added support for the analysis of .razor files.

2.3.6-funcrel

Other Updates

Details
.vm files without html tags are not well parsed.
Some call links are missing due to file analysis order
Only one http request must be created when there are 2 calls of a function with the same url parameter.
Bad http requests are created in some cases due to a problem with evaluation
Missing links from Tapestry .tml files to Java back-end when tml files are not in the recommended directory
Bad resolutions are present from some variables named "this.something" to variables with same name "this.something" in another file which has nothing to do with the first one
Include links between SCSS source code objects are no more present when using CAST AIP 8.4.1

2.3.5-funcrel

Resolved Issues

Customer Ticket Id	Details
50158	Fixes an issue causing the analysis of JavaScript files to take a long time and eventually become "stuck".
49608	Fixes an issue causing an incorrect number of files to be considered for the step "match_aspx_to_vb_methods", in turn leading to missing links.
49523	Fixes an issue causing a false negative for the rule 1020070: "Avoid hard-coded network resource names (Javascript) ". URLs are now taken into account.
49756	Fixes an issue causing missing links from JavaScript functions to JavaScript functions (through intermediate import).
48043	Fixes an issue causing missing links between method/functions leading to missing Resource services objects.

Other Updates

Details
Create links from Tapestry .tml pages to Java back-end, using tapestry annotations in java classes
Libraries, tests, builds or minified files/folders must be skipped
An update has been implemented to create links from Tapestry ".tml" pages to the Java back-end (see the documentation).
The filters.json file has been updated to ensure that the dotnet.js, dotnet.debug.js, dotnet_support.js and binding_support.js files are automatically skipped (these files are generated by Microsoft for the JavaScript interop layer used in the WebAssembly runtime and provide no added value in analysis results).
Added support for Unirest (a HTTP client library).
Fixes an issue causing a false negative for XSS: onmouseover action (as a result, a new rule has also been introduced 1020110 "Avoid cross-site scripting within events such as onclick, onmouseover … events (razor))"

Rules

Rule Id	New Rule	Details
1020070	FALSE	Fixes an issue causing a false negative for the rule 1020070: "Avoid hard-coded network resource names (Javascript) ". URLs are now taken into account.
1020110	TRUE	Avoid cross-site scripting within events such as onclick, onmouseover … events (razor)

2.3.4-funcrel

Resolved Issues

Customer Ticket Id	Details
49243	Fixes a traceback message in the analysis log with Typescript extension: "AttributeError: 'str' object has no attribute 'get_name'".
48750	Update description of rule "Avoid using Javascript Function constructor" (1020066) concerning security.

Other Updates

Details
The filters.json file  has been updated to ensure that libraries, tests or minified/empty css files are automatically skipped.
Enhance link resolution for "module.exports" syntax.
Fixes an issue causing "Resource service" objects to not be created when source is generated by "https://openapi-generator.tech".
Support for "got" (Human-friendly and powerful HTTP request library for Node.js) added. See documentation example .

Rules

Rule Id	New Rule	Details
1020066	FALSE	Description updated for the rule "Avoid using Javascript Function constructor".

2.3.3-funcrel

Resolved Issues

Customer Ticket Id	Details
48943	Fixes an issue causing service objects using "react-io" to fail to be resolved.
48750	An update was made to the description section of the rule "Avoid using Javascript Function constructor" (1020066) concerning security and code injection..

Other Updates

Details
The filters.json file  has been updated to ensure that libraries, tests or minified/empty css files are automatically skipped.
Fixes an issue causing the analysis to run in an infinite loop.
Fixes an issue causing the analysis to fail.
Fixes an issue causing missing Razor method call objects when ternary if expression is present.
Fixes an issue causing a missing link between Razor Method call objects and .NET controller action objects.
Fixes an issue causing missing Razor method call objects.
An update to support "wretch" (see documentation ).
An update to support the analysis of the files "package-lock.json", "yarn.lock" and "npm-shrinkwrap.json" (see documentation ).
An update to support "lodash/get" for link resolution.
An update to support inclusion of .js files in .jsp files when .js references are in parameters.

Rules

Rule Id	New Rule	Details
1020066	FALSE	Description update (see 48750 above).

2.3.2-funcrel

Other Updates

Details
Fixes an error introduced in v. 2.3.1-funcrel: missing Razor method call object on "dynamodb" sample.

2.3.1-funcrel

Resolved Issues

Customer Ticket Id	Details
48589	Fixes an issue causing a missing link between WMCommonHeader.jsp file and included JSP files.

Other Updates

Details
Fixes an issue causing a missing vendor property for HTML5 SQL Query objects.
Fixes an issue where resource service objects computed from strings containing html code with "href=" inside are often not correct.
Fixes an issue causing missing links from .asp pages to database tables when the log message "HTML5-044 A problem occurred when parsing vbscript code" is present in the analysis log..

Rules

Rule Id	New Rule	Details
1020082	FALSE	Updates the rule "Avoid undocumented Functions" to change the scope to include methods and constructors as well as functions.

2.3.0-funcrel

Resolved Issues

Customer Ticket Id	Details
48221	Fixes an issue causing incorrect links to all JavaScript functions that have the same name, instead of the one referenced in the HTML5 header.

New Support

Summary	Details
Support C/S links from ASP pages using ADODB COM component	See documentation: https://doc.castsoftware.com/technologies/web/html5-js/com.castsoftware.html5/2.3/notes/#support-for-adodb-in-aspaspx-files .