eCase Platform Release Notes 26.3.2.0

Product Enhancements

Microsoft Graph Email Configuration – Secret Expiration Tracking

#ID 1519026

Administrators can now track the expiration date of Microsoft Graph client secrets directly from the eMail (SMTP) connector configuration. A new Client Secret Expiry Date field is available when Authentication Mode is set to OAuth and OAuth Credential is set to Client Secret Based. Automated notification emails are sent 30, 7, and 1 day before the secret expires, with an additional notification after expiration to help prevent authentication disruptions.Enable or Disable PDF Portfolio Extraction

#ID 1487484

Notification details include the configured expiry date and remaining days to expiration. All secret expiration alerts are logged and can be reviewed through the Email Log and Scheduled Jobs.

Sensitive Data Masking for SaaS

#ID 1552024

Sensitive credentials and configuration values are now masked on administrative configuration pages for SaaS-hosted environments, helping protect passwords, keys, secrets, and license information from being displayed in plain text. This enhancement improves security while maintaining existing administrative workflows. On-premise and self-hosted deployments are not affected.

SAML SSO Library Upgrade

#ID 1564413

The SAML Single Sign-On (SSO) library has been upgraded to Component Space v8.2.0, delivering enhanced security, improved compatibility, and support for modern SAML standards to provide a more secure and reliable authentication experience.

Security Updates

We’ve made the following security updates in this version of eCase Platform:

ID	Description
1561568	Resolved Stored Cross-Site Scripting (XSS) vulnerabilities in eCase Correspondence and Folder Information where user-supplied input was not properly sanitized before being rendered. Input validation and output encoding have been applied to prevent script injection through correspondence data entry and folder information fields.

Bug Fixes

We’ve addressed the following bugs in this version of eCase Platform:

ID	Description
1554187	Fixed an issue in eCase where the configured Technical Support message in App Designer was overwritten during an application upgrade, causing it to revert to the default message. The configured Technical Support message is now preserved across upgrades.
1558912	Resolved an issue in eCase where links copied from the Foxit PDF Online Editor could not be pasted into DOC/DOCX documents in the ONLYOFFICE editor. Both editors now share the same link reference and users can successfully paste PDF links as clickable hyperlinks in supported documents.