Release Notes – Version 3.28.0

The latest version 3.28.0 of the Masterportal brings a comprehensive set of new features, improvements and bug fixes. The goal is to make daily work with the portal easier, increase system stability and meet current security standards.

New Features and Extensions for Users

• In the StatisticDashboard a map‑view is now offered, which displays the values of the selected statistic directly on the map.
• Labels and tooltips can be toggled flexibly in the StatisticDashboard, allowing the map view to be adapted to individual requirements.
• The dropdown components (DropdownSelect and DropdownAutocomplete) now support entry sorting (prop sortable) and showing selected entries first (prop selectedFirst). The autocomplete element also allows customizing the title of the “Select all” option (prop selectAllTitle).
• The new draw module (type="draw") replaces the deprecated draw_old and provides improved drawing tools; a bug affecting the editing of imported multi‑geometries (e.g. from KML) has been fixed so that the measurement tooltip is positioned correctly.
• In the LayerTree view secured layers now show a login hint when the user is not logged in, together with an updated lock icon (open when logged in, closed otherwise).
• WMS layers can now be configured with the additional parameters sld and gfi_template, enabling extended styling options.
• The button in the WMS‑Time module has been renamed to avoid confusion.
• The Accordion component now includes subtitles and an optional border styling for clearer content structuring.
• The SearchInterfaceTopicTree introduces a new parameter foldersFirst to control the order of result categories.

Improvements & Changes (Usability & Performance)

• The dropdown lists in the StatisticDashboard as well as the selection fields for categories, statistics and regions are now alphabetically sorted and display selected entries first.
• A loading spinner is shown when opening the StatisticDashboard; a failure displays an error message.
• Requests for multiple layers are now sent in parallel, significantly reducing load times.
• The “All Areas” entry in the region dropdown has been extended to a “Select all” option that selects all areas or is automatically activated when manually selecting them.
• Module caching (keep‑alive) now also works for lazy‑loaded core modules such as the StatisticDashboard, eliminating the need to reload and fetch data each time the module is opened.
• Legend images of secured services are now loaded with the login module’s auth token, preventing 401 errors.
• The GetFeatureInfo add‑on now loads missing gfiTheme add‑ons on demand instead of falling back to the default theme.
• When importing WMS services, if the root layer lacks a bounding box, the bounding box of the first child layer is used to validate the service; if none is available, the service is imported without an error.

Bug Fixes & Stability

• Issue #1629: Legend URLs are now fetched with the authorization header when required.
• Issue #1646: WMTS printing has been improved with raster reprojection, correct opacity handling and more reliable raster fallbacks; 3D‑print payloads have been reduced.
• Issue #1655 / #1663: It is now possible to configure multiple modules of the same type, provided they have different names and are placed in the same menu (mainMenu or secondaryMenu). Only one such module can be open at a time.
• Issue #1664: Geometries returned by wfsSearch in a CRS different from the portal’s CRS are now automatically transformed; the new dataProjection setting supports this.
• The “Hover‑Info” panel is removed when the StatisticDashboard module is closed to free memory.
• HTML tags are no longer stripped by DOMPurify in the Alerting component, allowing lists to render correctly.

Technical Updates & Security Aspects

• The minimum Node.js version has been raised to 22.23.4 (LTS) and 24.22.1 (LTS) to close known security gaps.
• The Masterportal API package has been updated from 2.64.0 to 2.66.0.
• Dev dependencies have been refreshed: vitest, @vitest/ui, @vitest/web‑worker, jsdom and dompurify (now v 3.4.17).
• CustomMenuElement now uses DOMPurify to sanitize HTML content and mitigate XSS risks.
• Four new utility functions for converting GeoJSON to Feature and Geometry objects, plus a safe popup function (XSS‑free), have been added to the utils library.

Deprecated Features & Notices

• The WMTS parameter transparent is deprecated; use transparency instead.
• The old draw module (draw_old) will be fully removed as of November 2027. All implementations should migrate to the new draw module.

Final Overview

Version 3.28.0 expands the Masterportal with user‑friendly map visualisations, enhances usability through new UI options and improves system stability via extensive bug fixes. At the same time, security aspects such as XSS prevention and up‑to‑date Node.js requirements are addressed. Administrators and developers should verify the updated minimum prerequisites and replace deprecated features where necessary.

Editorial Notes

• Check that your server environment provides at least Node.js 22.23.4 (LTS) or 24.22.1 (LTS).
• Update the Masterportal API package to version 2.66.0 to avoid compatibility issues.
• Replace all usages of draw_old by November 2027 with the new draw module (type="draw").
• Adjust WMTS layer configurations by replacing the transparent parameter with transparency.
• Take note of the new configuration parameters sortable, selectedFirst, selectAllTitle for dropdown components and foldersFirst for the topic‑tree interface.
• Use the new dataProjection parameter in WFS configurations to handle CRS transformations correctly.
• Ensure that custom HTML content in CustomMenuElement is sanitized with DOMPurify to minimise XSS risks.