Logo
Skip to main content
The SitecoreAI base image release 1.12.2 page has loaded.

SitecoreAI Changelog

Learn more about new versions, changes and improvements for SitecoreAI

SitecoreAI base image release 1.12.2

SitecoreAISitecoreAI
ResolvedImprovement

The latest release of the SitecoreAI base image 1.12.2 includes the following security enhancement:

  • Moved Sitecore.TransferredItems.AzureBlobStorage.ConnectionString from Sitecore.ContentTransfer.config to ConnectionStrings.configas TransferredItems.AzureBlobStorage. The showconfig admin tool will no longer expose the SAS token value.

This is not a breaking change: if the customer patched this setting, we will respect the setting’s value and use it over the connection string.

Upgrade Action: We recommend that the customer avoid storing the Sitecore.TransferredItems.AzureBlobStorage.ConnectionString in the configuration file. To change the blob storage connection string for Content Transfer, create an environment variable named SITECORE_XmCloud_dot_TransferFilesConnectionString and set its value there. 

The latest release of the SitecoreAI base image 1.12.2 also includes the following resolved issues:

  • Fixed a path traversal vulnerability in the /sitecore/shell/download.aspx endpoint. File paths are now normalized and checked before a file is served, so files outside the permitted directory can't be downloaded. Authorized downloads work as before.

  • Changes made to SXA per-site standard values will be propagated to Experience Edge.

  • Improved Workflow handling from Page Builder.

  • Previously, tracing was included in all GraphQL query responses. The default setting is changing from Always to Never.

  • As part of our ongoing efforts to improve the XM Cloud codebase and reduce unnecessary dependencies, we removed additional obsolete members. No service downtime in expected.

  • Updated ProtoStreamReader to use a pool of streams, allowing concurrent reads to reuse readers safely.
    As part of this change a new setting Sitecore.TransferredItems.PersistentReaderPoolSize controls the pool size; it defaults to 32.
    This setting is configured in \App_Config\Sitecore\CMS.Core\Sitecore.ContentTransfer.config

  • Resolved an issue where datasource items transitioned through workflow states via ApplyForDataSourceItemsAction were not automatically published alongside their parent page items.