Tuesday, January 15, 2013

Orbeon Forms 4.0 Beta 2

Today we released the second Beta release of Orbeon Forms 4.0! Like 4.0 Beta and the previous milestone builds this is not a final release.

In this release, we fixed a number of Internet Explorer issues (in particular for IE 7, which we don't recommend to use but which we still support, but also some IE 8 and IE 9 issues), some improvements to the Form Runner Wizard view, and more. Here is the overall list of changes since the first Beta:
  • Form Builder
    • Also add Italian and Korean among top languages
  • Form Runner
    • Wizard: truncate long section titles to the left (#711)
    • Non-relevant sections show in wizard view (#699)
    • Blank oxf.fr.default-logo.uri causes invalid request (#713)
    • Call the search API without app/form returns no documents (#709)
    • IE8: licence plate digits appear vertically (#705)
    • IE7: Navigation boxes around arrows not tall enough (#723)
    • IE7: Navbar is too high(#721)
    • IE7: Wizard: too much space in TOC (#722)
    • IE7: Unbalanced padding with input fields (#727)
    • IE7: Bootstrap add-on misaligned (#728)
    • IE7: Grid cell content not top-aligned (#729)
    • IE7: fr:box-select too wide (#730)
    • IE7: Upload control too wide (#731)
    • ClassCastException when using Oracle persistence layer on JBoss 7 (#726)
  • XForms engine
    • Regression: XML parsing error with IE9 after fix to #682 (#717)
    • IE9: Checkboxes misaligned (#704)
    • xf:output with date type outputs timezone (#689)
    • Better radio/checkboxes alignment
  • Other
    • Set Xerces SecurityManager (#686)
More information is available in the in-progress release notes for 4.0.

You can download the builds using these links:
Don't forget to grab a trial license for the PE version.

Please send feedback:


  1. Didn't I read that 4.0 by default prevented access to the form runner data? All I want my users to do (as a first step) is create and submit new forms; I don't want them to see, edit, or create other forms. I downloaded and installed orbeon-4.0.0.beta2.201301160141-CE.zip in Tomcat (Ubuntu 12.04), created and published a form in the bulider, opened the form as a user, filled it in, submitted it, and then was able to access the form builder via http://example.com:1234/orbeon/fr/, which I though was prevented in 4.0. All I want them to be able to access is http://example.com:1234/orbeon/fr/my/form/new - what am I missing?

  2. By default, 4.0 prevents access to the eXist database and the REST API used for persistence, which really should never be accessible to browsers. But out-of-the-box, all the web pages are accessible. For your use case, I would setup the web app so only the new page for your form is accessible to non-authenticated users. You can do this in many ways; for instance in an Apache front-end (with this config), or with the UrlRewriteFilter.