ONLYOFFICE Docs Enterprise Edition with HumHub Connector v9.3.0
Released: Feb 24, 2026
v9.3.0 での更新項目
機能
- All Editors:
- Implemented the ability to add hyperlinks to images, shapes, or groups.
- Implemented all settings for texture fills for images.
- Updated macro recording in documents, spreadsheets, and presentations.
- Document Editor:
- Added Multiple pages view.
- Added the Zoom to 100% and Multiple pages buttons to the View tab.
- Changed the appearance of comments. Now a user's color is used and the beginning and end of the comment are displayed.
- Implemented the ability to select words/paragraphs by double/triple-clicking the mouse.
- Added saving to the MD format.
- Moved header and footer settings to a separate Header & Footer tab.
- Spreadsheet Editor:
- Added support for new functions: REGEXTEST, REGEXREPLACE, REGEXEXTRACT.
- Improved work of the COUNTIF function.
- Added support for dynamic arrays.
- Added Solver for solving linear problems (Simplex LP).
- Changed the color of the resolved comment indicator.
- Added the ability to select multiple separators when splitting text into columns/pasting from the clipboard.
- Added the Format button, which combines various functions for working with sheets/rows/columns.
- Added support for TSV files for reading.
- Presentation Editor:
- Added support for GIF animations playback in the slideshow demonstration mode.
- Forms:
- Added the signature settings window with the ability to draw and add text to signatures.
- Added the ability to stretch fixed forms to fit the table cell size using the context menu.
- Added the Protection tab, which duplicates the Protect functionality in the File menu.
- Added saving to the MD format.
- PDF Editor:
- Added version history.
- Added Multiple pages view.
- Added the Zoom to 100% and Multiple pages buttons to the View tab.
- Implemented a password prompt when enabling the Edit PDF mode if the file is protected from editing.
- Added support for Link annotations with the ability to add them both to an area and to text on a page.
- Added the ability to continue editing a PDF using embedded fonts.
- Added the ability to redact text using the auxiliary pop-up toolbar.
- Added parameters for printing pages.
- Back-end:
- Added two open handlers for integrators: /meta/formats - a list of formats for conversion in the json form /meta/config - connection data (headers, addresses, file size limit).
- Added caching to Service Worker with replacing the last three opened documents. This speeds up reopening and allows caching of large files, which the browser doesn't do.
- Added information pages for the example and admin-panel services that are not running.
- Customization:
- Changed the permissions.copy parameter of the config. Copying is now prohibited not only to the external buffer, but also to the internal one. A corresponding warning is displayed when opening the editor or attempting to copy.
- Mobile:
- Added highlighting of active arguments when entering a formula in the Spreadsheet Editor.
- API:
- Added methods for working with footnotes and endnotes.
- Added plugin methods for working with add-in fields.
- Added a new ApiColor class for unified color handling and updated existing methods.
- Added methods for creating ApiColor instances.
- The following names are available for the theme color: accent1, accent2, accent3, accent4, accent5, accent6, bg1, bg2, dk1, dk2, lt1, lt2, tx1, tx2.
- Added methods for the ApiColor class.
- Updated methods for working with text, background, and border colors. Now they accept/return ApiColor instances.
- Added new methods for data validation in the Spreadsheet Editor.
- Added new ApiAutoFilter and ApiFilter classes for unified work with sheet autofilters and column filters in the Spreadsheet Editor API.
- Added methods for creating ApiAutoFilter instances.
- Added methods of the ApiAutoFilter class.
- Added methods of the ApiFilter class.
- Added a new ApiSlideShowTransition class for managing transitions between slides and supporting hyperlinks to shapes/images.
- Added methods for creating and retrieving transitions.
- Added methods of the ApiSlideShowTransition class for setting transition effects.
- Added methods of the ApiSlideShowTransition class for managing speed and duration.
- Added methods of the ApiSlideShowTransition class for managing auto-transition.
- Added methods for creating and setting hyperlinks using the new ApiHyperlink class.
- Added methods for retrieving information about a shape's fill and stroke.
- Added classes and methods for working with animation.
- Added plugin methods to check that the form is signed and to get the current Add-in field for plugins like Zotero.
- Added methods for blocking the form from being changed (similar to the lock button in the UI).
- The FormData object is extended with the following fields.
- options - added for checkboxes, radio groups, drop-down lists, and combo boxes label - text label for checkboxes (if specified) format - format for date fields lang - language for date fields.
- Changed the CreateStroke method for Apiclasses - added the sDash parameter.
- Added new methods for the ApiDrawing class.
- For the ApiDrawing class, changed the following methods: Select (added the isReplace parameter), SetHorPosition (added the bPercent parameter), SetVerPosition (added the bPercent parameter).
- Added the GetDrawingsByName method for the ApiDocument, ApiWorkbook, and ApiPresentation classes.
- Added the GetSelectedShapes, GetSelectedDrawings methods for theApiWorksheet class.
- Added the SetPaddings method for the ApiShape class.
- Added a method to ApiTable to correctly set table proportions.
- Added a method to ApiChart to get the chart title.
- Added API for macros in the PDF Editor with the ability to add, delete and edit pages, forms, annotations, autoshapes, tables, images, charts.
不具合の修正
- Security:
- Fixed several vulnerabilities with out-of-bounds read in XLS processing/conversion (via FilePass, HLink, rgXTI.itabLast, Formula record cce, ShapePropsStream, and CRN.colLast records/fields) leading to information leak and ASLR bypass.
- Fixed vulnerabilities with untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors) leading to information leak and ASLR bypass.
- Fixed a DOM-based XSS vulnerability when executing a macro using dynamic import() (CVE-2021-43446, CVE-2023-50883, CVE-2024-44085).