WorldServer

WSXI-7838

The information in the Create Project wizard is now displayed properly even when the Compatibility View is enabled in Internet Explorer 11.

WSXI-7994

If you specify fragments of Java Scripts code as names of term databases, the code is no longer executed.

WS-8049

Additional protection has been added to prevent clickjacking attacks. By default, WorldServer pages can no longer be included in a frame from a different origin.

However, in some cases, WorldServer may need to run from more than one origin (for example, in a clustered environment). In such cases, with the default restrictions, certain pages might not be loaded in a frame,

because they have different origins. Thus, you can now add trusted origins in the csp_frame_ancestors.properties file. To add a URI to the trusted origins list, add a new line at

the end of that file for each page that you want to include. This line should have the following structure: relative URI = origin (<protocol>://<host name>:<port>).