FOIAXpress Release Notes 26.1.1.0

Prev Next

Product Enhancements

1.1  SAML Certificate Expiry Validation & Reminder Notification

ID# 1325932

For Sign On Mode configured for SAML, we have introduced the functionality to automatically generate an email notification 30 days prior to certificate expiration as a reminder. A notification email will be sent to Admin users for all applicable certificates.

1.2  Validate Action Office for PAL

ID# 1350301

With this update, we have ensured that messaging behavior remains fully aligned with Action Office configuration settings by preventing users from sending messages to the requester when PAL is not enabled for the associated Action Office. This update helps maintain data integrity, prevents unauthorized outbound communication, and ensures you are immediately informed when required PAL configuration is missing.


When you attempt to send a new message or reply to a message from the requester from the Message To/From Requester tab, the system now validates whether PAL is enabled for the Action Office associated with the request. If PAL is not enabled, FOIAXpress displays an alert message and restricts the user from sending the message.

1.3  Enhanced Email Template Selection and Customization for Consultation Packages

ID# 1350317

With this enhancement, you can now select and optionally customize email templates while creating and sending Consultation Packages, ensuring consistent communication and preserving any changes made prior to delivery.

You can choose an email template and customize it during Consultation creation or before sending the Consultation, without being required to edit the email template separately.

Click the Edit icon beside the Email Template drop-down menu and make the necessary changes to the template’s Subject or Email Body. These updates are automatically retained and will appear both in the Consultation listing and at the time of sending.

Consultation emails will be sent using the selected To, Cc, and Bcc addresses, with the correct subject and body based on whether changes were made. If no edits were applied, the default content of the chosen template is used.

This behavior is supported across both delivery modes: Via Email/Save and Via Collaboration Mode.

1.4  Consistent Display of Redactions, Sticky Notes, and Annotations in Consultation Packages

ID# 1324046

We have ensured that all Redactions, Sticky Notes, and other Annotations applied during the Consultation process display consistently, regardless of DPI settings, across the Collaboration Portal and FOIAXpress, preserving accuracy and alignment, and remain unchanged throughout the Consultation workflow, from initial review through final ingestion.

This eliminates the need for repeated review and ensures that all consultation-applied items remain intact during the entire exchange.

1.5  Display Subject as a column Across RFD, Consultation, and Collaboration Portal

ID# 1350306

We have added the option to view, search, and sort records by the Subject field across Request for Document (RFD), Consultation, and Collaboration Portal modules, enabling clearer identification and more efficient navigation of records.


In the RFD module, the Subject column now appears in both the Request for Documents tab and the Request for Document Logs.


In the Consultation module, the Subject column is displayed in the Consultation tab. It is also included in the Consultation Review Log and the Logs/Reports tab within Request Details.

Within the Collaboration Portal, the Subject column now appears in Consultation, Request for Documents, and Completed Tasks listings. The Subject displayed reflects the original subject assigned when the Consultation or RFD was first created. You can sort records by Subject across all portal listings.

1.6  Enable direct upload of records from Collaboration Portal to EDR

ID# 1277926

With this feature, you will be able to select records you have received from the Collaboration portal to undergo the Electronic Document Review processing directly from the request, instead of having to download and upload.

To add documents received from Collaboration portal to Electronic Document Review, navigate to Request > Request for Documents > Messages.

Open the message with the documents attached. Click Add to Electronic Document Review.

Select the documents you want to add and click Add to Electronic Document Review.

Configure the Clustering Settings, Document Review, and Email Attachment as per your preference and click Add. The documents will be uploaded for Electronic Document Review.

1.7  Display Secondary User Group on the Request Dashboard Page

ID# 1369473

FOIAXpress now enhances visibility into Group Queue Assignments on the Request Dashboard by displaying both Primary and Secondary Group Assignments for users. This allows FOIAXpress users to easily track all requests associated with their assigned group queues, reducing the chance of missing items routed through secondary assignments.

A new Group Queue Assignments section now appears automatically, consolidating:

  • Primary Group Assignments

  • Secondary Group Assignments

  • Combined totals (Primary + Secondary)

These counts display for all users by default, requiring no configuration. This improvement provides clear insight into full group queue responsibilities and supports more efficient workload management.

Security Updates

We’ve made the following security updates in this version of FOIAXpress:

ID

Description

1369528

Fixed an authorization bypass issue where Reviewer-level users could directly access admin-only pages and add documents via direct URLs. Server-side role validation has been enforced across all sensitive endpoints.

1369523

Fixed stored XSS vulnerability in Collaboration module by implementing input sanitization and output encoding.

1372728

Introduced output encoding (e.g., HTML entity encoding), input validation, and Content Security Policy (CSP) headers.

1369529

Enforced MFA, applied rate-limiting, secured session tokens, and adopted robust password policies.

1390365

Sanitized all user inputs rendered into HTML, used templating engines with auto-escaping, and limited rendering of untrusted content.