This document covers the following topics:
Beside this product documentation, additional product information is available at the following places:
The Knowledge Center at https://empower.softwareag.com/ (for registered users only).
The Natural for Ajax discussion forum at http://tech.forums.softwareag.com/techjforum/forums/list.page.
For detailed information on the supported operating systems, application servers, web containers, web browsers, and other prerequisites, see System Requirements.
This section covers important security information.
The version of JDOM included in Natural for Ajax 9.1.4 contains the following vulnerability:
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
https://nvd.nist.gov/vuln/detail/CVE-2021-33813
Natural for Ajax uses the vulnerable SAXBuilder class only for XML created internally in the Natural and/or Natural for Ajax products. It switches off Entity expansion in all places where possible. Consequentially, the vulnerability does not apply, except for one area that needs to be pointed out:
When a Natural screen is exchanged between the Natural Web I/O server and the Natural for Ajax java framework in the application server, the Natural for Ajax java framework will load the XML with Entity expansion switched on.
However, the loaded XML is created from within the Natural/NWO server internally - it is not an external XML file. The vulnerability is only exposed should it be possible to tamper this XML during the exchange between Natural and Natural for Ajax.
In local environments, i.e. when Natural and Natural for Ajax are running on the same machine, this is not the case. An example, in which the vulnerability would not be exposed, is when running NaturalONE with the local runtime and the local Tomcat server.
When running Natural and Natural for Ajax on different machines we highly recommend securing this Natural screen exchange by setting "Use SSL" in the session configuration. A secure connection is then established between Natural for Ajax and the Natural Web I/O Interface server that prevents attackers from exploiting this vulnerability.
The NEWSFEED control is now deprecated. It requires rome-0.9.jar. The rome-0.9.jar is not packaged with Natural for Ajax anymore. The rome-0.9.jar uses JDOM, which in the current versions has the vulnerability as described in the previous section.
This section describes new features and enhancements in Natural for Ajax which have been added with this release of Natural for Ajax.
With this version of Natural for Ajax the Edge Chromium Browser is now supported.
The Bootstrap Icons Library is now part of the Natural for AJAX product. It can be used in responsive and non-responsive controls in different ways. See section Working with Icons.
The BMOBILE:COMBOFIX and BMOBILE:COMBODYN
are light-weight selection controls.
For details, see section Responsive Page Layout and Controls > Responsive Controls
The controls BMOBILE:DROPDOWN,
BMOBILE:DROPDOWNLIST, BMOBILE:DROPDOWNHEADER,
BMOBILE:DROPDOWNITEM, BMOBILE:DROPDOWNSEPARATOR
support various dropdown functionality such as dropdown menus and dropdown
forms.
For details, see section Responsive Page Layout and Controls > Responsive Controls
All responsive controls with a
name/nameprop property now also support a
straighttext property. Via this property, the name
value can be rendered either as html or as straight text.
All responsive controls with a
title/titleprop property now also support a
titlestraighttext property. Via this property, the
tooltips can be rendered either as html or as straight text.
The responsive grid
BMOBILE:SIMPLEGRID
now supports Server-Side Scrolling and Sorting.
For password fields you can now add an icon to toggle the password visibility.
ITR controls now support inline rendering via the new
inline property. This improves the rendering when
zooming pages in Google Chrome or Edge Chromium browsers. See section
Working
with Containers > Positioning of Controls inside a Container > ITR in
Google Chrome and Edge Chromium.
The REPORT and REPORT2 controls now also support to set the name
dynamically at runtime via the property nameprop.
This section describes new features and enhancements in Natural for Ajax which have been added with this release of Natural for Ajax.
Support for Natural-specific Properties like njx:natname in Responsive Controls
New Responsive Containers: BMOBILE:SIDEBAR*, BMOBILE:HORIZONTALBAR, BMOBILE:CONTENT
FIELD Control: New Value in Property formautocomplete Supported
FIELD Control With New properties onclickmethod and ondblclickmethod
Responsive and non-responsive NatLogon and NatDisconnect pages are now supported.
Bootstrap 4 is now supported for responsive controls. Bootstrap 4 is
the default. If you still need to use Bootstrap 3, you can use the attribute
uselatestbootstrap in
cisconfig.xml to run all pages with Bootstrap 3 or use the
property uselatestbootstrap in the NATPAGE control
to run a single page with Bootstrap 3
See Ajax Configuration for details.
Most responsive controls now support Natural-specific properties
like njx:natname in the same way as non responsive
controls.
The PAGEBODY tag is now obsolete for responsive
controls. The templates for responsive pages do not contain the
PAGEBODY tag anymore. Responsive pages with PAGEBODY
tags are still supported but contain obsolete HTML code.
The Layout Painter supports a new page template for development of responsive pages with sidebars. See also Responsive Page Layout and Controls for further details.
A more flexible and lightweight
BMOBILE:FORM
container is now supported. The
BMOBILE-FORMGROUP
containers now supports horizontal and vertical forms. For the usage in bar
controls - like the BMOBILE:HORIZONTALBAR
and the BMOBILE:SIDEBAR
- a BMOBILE:FORMINLINE
container is supported. A
BMOBILE:FTEXTOUT
control has been added to support plain read-only text in forms.
Bootstrap 4 tooltip support is now used to render tooltips. The
rendering can be customized via CSS style classes. All form controls now also
support setting the tooltip text dynamically from within Natural. Use the
property titleprop in the corresponding
controls.
The BMOBILE:COL
container now supports a visibleprop property.
Most responsive
containers
and controls
now support a testtoolid property.
The new responsive containers
BMOBILE:SIDEBAR*,
BMOBILE:HORIZONTALBAR
and BMOBILE:CONTENT
support frequently used patterns for modern responsive pages.
Additional controls like
BMOBILE:TOGGLER,
BMOBILE:SIDEBARGROUP,
BMOBILE:BARTEXT
support corresponding functionality for flexible rendering.
Responsive input controls like
BMOBILE:FFIELD
now support a helpid property in the same way as
non-responsive controls.
The file cisconfig.xml now supports the new
settings pagepopuponresize,
pagepopuphorizontal and
pagepopupvertical. Use these settings to fit a
page pop-up to its parent.
See Ajax Configuration for details.
The formautocomplete property of the
FIELD and
BMOBILE:FFIELD
controls now supports the value new-password. In
the current versions of Chrome, this can be used to prevent Chrome from
autofilling form fields.
Natural programs can now react to click and/or double click events.
Refer to the description of the FIELD control
properties for details.
Use the new
RPIECHART
property animateselection if you want to render
the selected slice with a bigger radius (= move out effect).
A new BMOBILE:HELPMODAL dialog shows help texts for
specified help IDs. All responsive modal dialogs -
BMOBILE:MODAL,
BMOBILE:INTMODAL,
BMOBILE:HELPMODAL
- are now draggable and resizable.
For BMOBILE:MODAL, the page URL can now be specified
dynamically at runtime.
You can add own JavaScript to Natural Web I/O pages in a file usernatunicscript.js. See section Natural Web I/O Style Sheets for details.
This section describes new features and enhancements in Natural for Ajax which have been added with this release of Natural for Ajax.
You can now adapt the third party geocoder URL in the Ajax configuration file if needed. See Ajax Configuration for details.
The AUTOCOMPLETE
control now enables you to limit the results shown in the drop-down box. The
AUTOCOMPLETE control now also has a new property
maxresults.
The FIELD control now has a
new property autocompleteresultsref.
DATEINPUT2 now supports the
properties stylevariant and
displayprop in the same way as the
FIELD control.
The REPORT2 control supports PDF report generation in responsive and non-responsive design. In difference to the REPORT control, it does not require to additionally render the data in the HTML pages.
Automatic cleanup of ServerLog*.log files is now supported. You can configure the maximum storage age of ServerLog*.log files in days. See Ajax Configuration for details.
BMOBILE:SIMPLEGRID now fully supports editable columns also on small devices.
In ROWTABLEAREA2, all or just the selected items can now be copied to the clipboard or exported to a file. See Export to Clipboard and File in the description of the ROWTABLEAREA2 control grid for further details.
ROWTABLEAREA2 supports the new controls ICONBAR, ICONBARLINE, TOCLIPBOARDICON, TOFILEICON and BLOCKSCROLLINGBAR. See Icon Bars in the description of the ROWTABLEAREA2 control grid for further details.
Performance of Layout generation has been improved. Also the
analysis of generation errors has been simplified. See
Generating
HTML Pages Using the Command Line and the new attribute
htmlgeneratorlog
in the Ajax Configuration section.
You can now switch off writing log information to the server log.
See loglevel
in the Ajax Configuration section.
BMOBILE:SIMPLEGRID now supports icon columns. See BMOBILE:ICONCOL for details.
A set of responsive modal controls has been added:
BMOBILE:INTMODAL,
BMOBILE:INTMODALHEADER,
BMOBILE:INTMODALBODY,
BMOBILE:INTMODALFOOTER.
Many responsive controls now support icons as values for
name/nameprop or as value for other text based
properties. For examples see the Natural for Ajax Demos.
This section describes new features and enhancements in Natural for Ajax which have been added with this release of Natural for Ajax.
BMOBILE:FORMAREA with new Properties legendprop, visibleprop and invisiblemode
BMOBILE:FORMGROUP with new Properties visibleprop and invisiblemode
CSVCOLUMN now supports Properties njx:natname and njx:natstringtype
A set of responsive tab controls has been added:
For the BMOBILE:ALERT control, you can now define the duration after which the alert box will disappear.
For the BMOBILE:PANEL container, you can now control the folded state dynamically from your Natural program.
For the BMOBILE:FORMAREA container, you can now control the visible state and the name of the legend dynamically from your Natural program.
For the BMOBILE:FORMAREA container, you can now dynamically define the name from your Natural program and from multilanguage files.
For the BMOBILE:FORMGROUP container, you can now control the visible state and the name of the legend dynamically from your Natural program.
Some advanced properties have been added to the BMOBILE:CHECKBOX control.
A responsive radio button control BMOBILE:RADIOBUTTON is now available.
The responsive controls BMOBILE:VIDEO, BMOBILE:MEDIAUPLOAD and corresponding subcontrols have been added to integrate and upload media objects.
The controls BMOBILE:SIDENAV, BMOBILE:NAVTREE and BMOBILE:SIDENAVCONTENT support the implementation of responsive side navigation using a responsive navigation tree.
For the BMOBILE:NAVBAR
control, you can now set text and images as value of the
brandprop property. Via the new property
brandstraighttext you can distinguish between the
representation.
The BMOBILE:SIMPLEGRID control now supports editable columns. See the corresponding sample in the Natural Ajax Demos for details.
Support to render custom holidays in different style has been added
to the DATEINPUT2
control. For details, please refer to the new properties
HOLIDAYS* and the corresponding sample in the
Natural Ajax Demos.
For the DATEINPUT2 control, you can now customize whether or not the calendar should open on using the F4 or F7 key.
The DATEINPUT and
DATEINPUT2 controls
now support the property testtoolid.
The samples now contain an additional user interface component with performance hints for non-responsive layouts and containers.
FOP 2.2. is now used for the PDF report generation in Natural for Ajax. This version requires more Java memory. When using this feature you might have to increase the configuration settings for Java memory in your web application server.
For details concerning Java memory settings, please refer to the documentation of your web application server.
The CVSCOLUMN control now supports the properties
njx:natname and
njx:natstringtype.
For responsive pages a style guide is now available. You find the latest version in the NaturalAjaxDemos NaturalONE project.
The standalone SWT Client, which is based on Java Web Start, is not part of the delivery anymore. Until October 2019 you can request the client in case you require it.
Natural for Ajax now supports a password length of 128 for Natural servers which also support a password length of 128.