• New reports no longer store the report data source in the report template by default. You can change this option in the report's Document Properties, however be aware that this gives anyone with the report template full access to your data source
• New implementation of the Datasource Manager
• Redis support as cloud persistence backend was removed. If you use it then migrate to MongoDB before you update
• Cloud synchronization and events to run i-net Clear Reports shared across several cloud nodes added
• Let's Encrypt protocol version ACMEv2 supported. The Let's Encrypt protocol version ACMEv1 will be end of support on November 1st, 2020. If you use Let's Encrypt certificates for HTTPS then you need this update
• Critical Security Update for Help Plugin (CVE-2020-11431)
• Fixed XXE vulnerability for authenticated users with privileges to ad-hoc reporting or remote designer (CVE-2020-12684)
• Fixed multiple XSS vulnerabilities (login was not required).
• Fixed a path traversal vulnerability which allowed access to files within the installation folder and its sub-folders

• The “External visible URL” being used for the EHLO command when connecting to an SMTP server
• Any subdomain (like *.example.com) on “Allowed Cross Origins” supported
• PDF export: Dejvu-Sans is used as default font for font embedding if no other font is available in the font path

• Possible deadlock on startup occurred if a custom configuration was set via “clearreports.config” or “clearreports.configfile”
• Permission check with Authentication Groups for logged in users was wrong
• Multiple values in the property “Other VM Arguments” in configuration dialog “Web Server” were not supported
• Rare rounding error occurred when the scale of a number was reduced by more than 9 digits in a formula function
• Access to the repository with Login using WebDav has not worked on Windows
• OutOfMemory or ReportCache errors occurred because of problems with false positive low memory detection. The log output contains the warning: “There was a low memory situation and possibly some jobs were canceled.” and maybe other subsequent errors

• Fix the recognition of value data types for JSON data sources if the source files contain white spaces
• Null values in JSON data source supported
• New data Sources will be saved in the new application scope now
• The property “driverLibrary” has been removed from the list of properties for Data Sources. Additional drivers for databases have to be provided using the “lib” directory of the installation

• Thai support for the formula function ToWords
• Add Engine.SetData to the .NET process bridge

• Security issue “Cross-Site Scripting” occurred
• Unknown operation: com.inet.report.renderer.doc.controller.bk@0 occurred with TotalPageCount (NofM) in subreports
• Property RELOAD_ON_NEW_REQUEST does not work if there was no output format specified in the report URL
• “java.io.NotSerializableException: com.inet.font.truetype.i” occurred if a font path was set and “Page NofM” or PageCount was used in very large reports. Because of that the server could hang
• Regression occurred: Special field “current user” and the formula WebUserName returns the display name. Now it returns again the id of the user and not the display name
• Embedded fonts used in PDF documents embedded in a sub report where missing in the created report
• Layout of text in right to left fonts (Arabic, Hebrew) was wrong, if the text parts have different styles (bold, italic, etc.). It occurs in the output formats: PDF, PostScript, image and Java report viewer
• Sorting in charts with 2 groups was incorrect if the first category value does not contains all series values of the chart. In this case the sorting of the series was incorrect
• PDF export: Embedded fonts with glyphs in the range of 0xF000-0xF0FF were not dispalyed in PDF file
• CSV export: Empty CSV export with encoding UTF8 opened with MS Excel. MS Excel shows the content “” in the first cell instead of a complete empty table
• ORA-01000: maximum open cursors exceeded - occurred if Oracle JDBC driver was used
• NullPointerException in debug mode if a plugin has no version information
• Patching the SQL command to query the metadata (column names) was wrong if the command contains function listagg(…) within group …. In this case WHERE 1=0 was added to the listagg function
• XLSX / ODS export: Percentage number was incorrectly displayed (multipled by 100)
• Patches the SQL command to query the metadata (column names) was wrong if the SQL statement contains strings which contains brackets, e.g. REPLACE(A.FIELD,'；)',')'). In this case WHERE 1=0 was added after the ORDER By clause
• Break algorithm improved for Text Interpretation “HTML(advanced)” to prevent breaks in text lines
• Oracle table source identifier with a package name will be always used as name of a stored procedure and never as name of a table. This makes it possible to use the same name for a package stored procedure and a table
• IllegalStateException: REGISTER error occurred because a classloader loop occurred if the i-net Clear Reports libaries has been added to /lib directory

• Layout of text in right to left fonts (Arabic, Hebrew) was wrong in the design view, if the text parts have different styles (bold, italic, etc.)
• NullPointerException occurred when opening an rpt file with corrupt subreport, created by an older i-net Designer version

• XLSX export: Line offset was wrong on third sheet if “New sheet per top level” was enabled
• The automatic font scaling did not work as expected in Internet Explorer

• Persistence Repository implementation added

• Benchmark for CPU and IO rating added

• XML export added to the task planner
• Prompt values added as placeholder that can be used for example for report name or in email action.
• It is now supported to set “Delete previous results after X days” for a file action. With this property it is possible for example to delete old backups

• Buttons to sort and filter task list not displayed if task list is very long

The Data Source Manager has been reworked from the ground up and comes with an all-new Remote GUI interface. It now supports assigning datasource permissions to specific user groups

• Completely new Data Source Manager Interface
• New Data Sources will always be created in the Application Scope
• Existing Data Sources in the former User/System/Temp/Session - Scopes will be readonly in the Remote GUI
• Assigning user group permissions to datasources can be performed by users with the User Manager permission.
• Data Sources can be exported individually using the cards menu and multiple Data Sources can be exported using Click and CTRL+Click / CMD+Click to select and then using the top menu “Export” Button
• The Import (top menu → Add → Import) of Data Sources will always create the new Data Sources in the editable Application Scope
• The former Scopes are available via API only. The Remote Interface only displays the indirectly using the “visibility” entry in the Data Source card
• Default value of the property “Supports SQL92” in a new Oracle datasource is true now

• For a new Oracle datasource the default value of the property “Supports SQL92” was false. Since Oracle version 9 it supports the SQL ANSI 92 syntax. Therefore the default value is true now
• The datasource manager allows to enter a custom database/catalog name while still suggesting existing names
• Cannot read property 'driver.group.basic' of undefined occurred if a datasource was saved without modifications

• Engine.SetData added to the .NET process bridge

• Report server was started with command line parameter “-importdatasource” or “-forceimportdatasource”