--- schema_version: "1" id: 1feca49b62916da4df59bbc753ce51908b6092e06625c4f21ecd7103582bd771 title: Patch Notes for B2B Commerce for Visualforce Summer ’19 (Version 4.11) collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2b_commerce_rn_2019_summer_patches.md canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2b_commerce_rn_2019_summer_patches.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: a62bf319a83a7374b50dc584c5611f7f1f619511dd4b018f9e736402cbcf824c description: Patch notes for B2B Commerce. products: - Commerce - B2B Commerce release: "264" --- # Patch Notes for B2B Commerce for Visualforce Summer ’19 (Version 4.11) Patch notes for B2B Commerce. ### Required Editions
Salesforce Compatibility Salesforce Classic and Lightning Experience for Enterprise, Performance, Unlimited, and Developer editions.

B2B Commerce Compatibility

Any org updating to or installing a patch for B2B Commerce for Visualforce Summer ’19 (version 4.11)
![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-b2b_commerce_release_notes-264-0-0-production-enus/dd2bc651-f664-4278-bce2-a3d325362afb/images/icon_tip.png) Tip - If you install a particular build in a sandbox and test and validate against that version, ensure that you also install the _same_ build in production. For example, if you install build 3.145.3 in a sandbox, ensure that you also install build 3.145.3 in production. - Make sure that you find the correct link for your org type before you proceed with installing a patch. For example, if you're already logged in to a production org, select the URL for a production org, not a sandbox. Reverting or canceling an installation isn't always possible. - If you're installing B2B Commerce for Visualforce for the _first time_, install the most recent patch so that your implementation has the latest fixes. First, complete the _Set Up a Storefront_ steps in the [B2B Commerce for Visualforce Help](https://resources.docs.salesforce.com/rel1/doc/en-us/static/pdf/b2b_commerce_visualforce.pdf), and then complete any required upgrade steps for each patch that precedes the build you installed. - Some fixes update default handlebars.js templates that render components on the storefront. If you've previously overridden a default template that receives a fix, reimplement your customizations based on the fixed version of the default template. This step ensures that custom code in your solution receives the benefit of the patch's fix. ## 3.145.30—March 1, 2024 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-30 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-30
ID Fix
W-14628880

Added the ability to filter the static resources that the ccrz.cc_util_UserInterface API utility class queries. This query includes static resources that contain your storefront's product images, theme files, and so on. This enhancement works around limits in your org if you've installed multiple managed packages, and allows you to specify the static resource namespaces that you want to query.

UPGRADE IMPACT: To implement this filter in your org, create metadata for a new configuration in the User Interface module that uses the API name nsList. Then, in your storefront settings, set the value of this configuration to a comma-separated list of the namespaces that you want to query. Avoid spaces between comma values, and be sure to include the default ccrz namespace in the list. For example, enter ccrz,other-namespace where other-namespace is a custom namespace that you want to include. For more information, see Create Metadata for the Namespace List Configuration Added in a Patch in the B2B Commerce for Visualforce Release Notes and Upgrade Guide.

## 3.145.29—August 4, 2023 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-29 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-29 | ID | Fix | | --- | --- | | W-13880591 | Fixed a potential vulnerability related to cross-site scripting (XSS). | ## 3.145.28—August 4, 2023 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-28 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-28 | ID | Fix | | --- | --- | | W-13171991 | Upgraded the versions of these JavaScript libraries distributed with the managed package: jquery-ui-custom.js from 1.13.1 to 1.13.2 and jquery.validate.js from 1.19.4 to 1.19.5. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the [jquery-ui.js release notes](https://jqueryui.com/changelog/1.13.2/) and [jquery.validate.js](https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.5) release notes. | ## 3.145.27—August 29, 2022 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-27 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-27 | ID | Fix | | --- | --- | | W-11148655 | Upgraded the versions of these JavaScript libraries distributed with the managed package: jquery-ui-custom.js from 1.12.1 to 1.13.1 and jquery.validate.js from 1.19.0 to 1.19.4. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the [jquery-ui.js release notes](https://jqueryui.com/changelog/1.13.1/) and [jquery.validate.js](https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.4) release notes. | ## 3.145.26—December 8, 2021 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-26 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-26 | ID | Fix | | --- | --- | | W-9877324 | Upgraded the versions of these JavaScript libraries distributed with the managed package: handlebars.js from 4.7.6 to 4.7.7 and underscore.js from 1.9.1 to 1.13.1. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the [handlebars.js release notes](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md) and [underscore.js release notes](https://github.com/jashkenas/underscore/releases/tag/1.13.1). | | W-9811677 | Fixed a potential vulnerability related to the My Orders section of the My Account page. | | W-9811589 | Fixed a potential vulnerability related to cross-site scripting (XSS) when modifying storefront settings in CC Admin. | | W-9811528 | Fixed an issue where an admin could potentially inject cross-site scripting (XSS) when creating custom configuration modules. | ## 3.145.25—April 14, 2021 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-25 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-25 | ID | Fix | | --- | --- | | W-9081916 | Fixed an issue where autocomplete suggestions displayed on top of the Quick Order widget's input field, rather than below the field as expected. | ## 3.145.24—March 10, 2021 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-24 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-24 | ID | Fix | | --- | --- | | W-8935212 | Fixed an issue where a JavaScript error occurred and prevented autocomplete in the Quick Order widget from working correctly. | ## 3.145.23—March 4, 2021 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-23 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-23
ID Fix
W-8246158

Fixed an issue where the Checkout page returned an Apex error that prevented checkout flow from completing successfully. This issue occurred when both of the following conditions were satisfied:

  • The Address Owned by User configuration of the Checkout module (co.uown) was TRUE.
  • A customer service representative (CSR) was logged in to the storefront using CSR flow and selected an effective account.

UPGRADE IMPACT: After you upgrade the managed package, update the Checkout module's Address Owned by User configuration to apply to all pages instead of only the Checkout page (co). Then, build and activate a new configuration cache.
## 3.145.22—December 7, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-22 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-22
ID Fix
W-8433759 Fixed an issue where the Quick Order widget didn't show autocomplete suggestions. This issue occurred after a buyer clicked Add More to add extra rows and entered three or more characters of a SKU to add.
W-8291160 Fixed a rare issue where a product was added to an incorrect cart when a buyer was logged in with an effective account.
W-8147969 Upgraded the version of the handlebars.js library distributed with the managed package to 4.7.6. This change updates the ccrz.cc_hk_UserInterface.standardIncludes method for both the Bootstrap 3 and classic interfaces. For more information about the changes in version 4.7.6, see the Handlebars release notes.
W-8115324 Fixed an issue where a subscription for a kit or dynamic kit didn't correctly evaluate recurring cost when adding to a cart or after pricing the cart.
W-8018995

Fixed an issue where the sharing rules for the following custom objects potentially exposed personal identifiable information (PII) in carts, orders, and addresses:

  • CC Cart
  • CC Contact Address
  • CC Order

These sharing rules were previously required for a storefront that allows a guest buyer to create a cart and check out. This fix removes the dependency on the specific sharing rules. Guest user carts and checkout continue to behave correctly without these rules.

UPGRADE IMPACT: After you install the patch, to remove the affected sharing rules and update sharing attributes in the default order confirmation email template, complete the steps in Remove Sharing Rules for Carts, Orders, and Addresses in the B2B Commerce for Visualforce Release Notes and Upgrade Guide.
## 3.145.21—September 16, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-21 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-21
ID Fix
W-7961815

Enabled the Secure attribute for the following cookies:

  • apex__cc_anonymous_Country
  • apex__cc_anonymous_Currency
  • apex__cclgtkn
  • apex__currCartId
  • apex__effacc

This attribute ensures that the managed package sends cookie data securely through an encrypted request over HTTPS protocol. For more information, see:
W-7953270 Fixed an issue where clicking the Show Pricing Tiers button on the Shopping Cart page caused the API to query all the user's entitled products. For price lists with a significant number of price list items, this issue could result in Apex CPU Limit exceptions.
W-7914390

Fixed an issue where duplicate internationalized spec values appeared on the Product Compare page. This issue occurred when both of the following conditions were true:

  • At least two CC Spec records had the same Name (such as Color), but different Locales (such as en_US and ja_JP).
  • A product had a spec value assigned for each spec.
## 3.145.20—August 17, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-20 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-20
ID Fix
W-7768452 Fixed an issue where the Apex batch jobs that refresh product index records failed because of Apex governor limits. This issue occurred when a product had over 5,000 price list items assigned, and one of the price lists was the storefront's master price list..
W-7765030

Fixed an issue where a buyer wasn't able to log in to the storefront. This issue occurred in an org that's resolved the security alerts for preventing unauthorized guest user access to their storefront data. If the user configured as the Default Record Owner owned multiple active carts that were abandoned, the heap size filled up. As a result, no registered users could log in.

UPGRADE IMPACT: This fix updates the ccrz.ccLogicUserLogin.determineStartURL() logic provider method in the following ways:

  • The call to ccrz.ccApiUser.fetch() specifies ccrz.ccService.QUERYLIMIT => 1 and ccrz.ccService.WODAO => True.
  • The call to ccrz.ccApiCart.fetch() specifies ccrz.ccService.QUERYLIMIT => 1.
W-7514943

Updated the default ccrz.cc_hk_UserInterface extension point class to distribute the latest stable, secure versions of jQuery (3.5.1) and jQuery Migrate (3.3.0).

UPGRADE IMPACT: This upgrade also introduces a breaking change where non-void HTML elements that use self-closing tags, such as <div/>, no longer render. This HTML compatibility change affects the default Handlebars templates included in the managed package, and can affect front-end extensions or customizations that you've already developed. For more details about the jQuery upgrade and the impact on the HTML used in your storefront, see the Salesforce Knowledge article, Upgrade to jQuery 3.5.1 in B2B Commerce for Visualforce Spring ’20 (Version 4.12) or Earlier.
## 3.145.19—June 16, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-19 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-19 | ID | Fix | | --- | --- | | W-7665567 | Fixed an issue where component product images didn't appear on a dynamic kit's Product Detail page. This issue occurred when adding two of the same component products to a dynamic kit. The products image for the second product didn't appear. | | W-7646050 | Fixed an issue where the `ccrz.ccServiceProductSpecIndex` data service provider class incorrectly queried `ccrz__E_ProductSpecIndex__c` records for all locales instead of filtering by a specific locale. This issue only affected performance, and didn’t impact any functionality. | | W-7575793 | Fixed an issue where a buyer was redirected to a URL from a promotion in the current browser window instead of a new browser window. This issue occurred for a promotion where Location Type is Banner, Link Type is URL, and New Window is enabled. This issue occurred only when the storefront had Google Analytics set up. | | W-7538045 | Fixed an issue where a buyer couldn’t click Add to Cart from the Sellers widget on the Product Detail page. | | W-7537647 | Fixed an issue where the Reorder widget didn't filter available orders correctly. This issue occurred when the Filter Orders Based on Owner storefront setting was disabled. But, the Reorder widget continued to filter orders based on whether the Owner field matched the logged-in user's ID. | ## 3.145.18—May 12, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-18 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-18
ID Fix
W-7517750

Fixed an issue where an error occurred when showing shipping options during checkout. This issue occurred after the following sequence of events:

  1. A buyer first selected a shipping option during checkout.
  2. The buyer exited checkout flow, returned to their cart, and changed the cart's contents in such a way that the selected shipping option became invalid.
  3. Finally, the buyer returned to the checkout flow.

This fix removes the invalid shipping option from the CC Cart record when proceeding through checkout again.
W-7502320 Fixed an issue where files in a static resource, such as CSS and JavaScript files, were repeatedly fetched and stored in the web browser cache. This fix removes query string parameters from the URL paths that B2B Commerce for Visualforce generates for a page's <script> or <link> tags.
W-7488085 Fixed an issue where CSR flow didn't respect the Filter Orders Based on Owner storefront setting.
W-7488009 Fixed an issue when enabling the AddrReadOnly field on a CC Contact Address record. The value of this field didn't propagate to the related CC Contact Address records that B2B Commerce for Visualforce creates for a cart, order, or invoice.
W-7484695 Fixed an issue where the billing and shipping addresses in the Order Review section of the Checkout page showed data from the wrong object. This issue occurred when using effective accounts. The Checkout page didn't show the value of the Partner ID field from the selected account's default billing and shipping addresses. Instead, the page incorrectly showed the value of the Account Number field from the selected account's corresponding account record.
W-7481065 Fixed an issue where the Owner column in the My Orders section of the My Account page showed an incorrect value. This issue occurred when the Filter Orders Based on Owner storefront setting was disabled.
W-7456715 Fixed an issue where a buyer couldn't add a product to the cart when the product's SKU value exceeded 18 characters. This issue occurred when the buyer clicked the Add to Cart button from the Product Detail page.
W-7453539

Fixed potential security vulnerabilities in some extension point classes.

UPGRADE IMPACT: This fix deprecates the ccrz.cc_hk_EffectiveAccount.fetchAccountData() method.
W-7441605 Fixed an issue where a menu didn't show more than three levels of nested menus.
W-7386334 Fixed an issue where subscriber extensions to the ccrz.cc_api_ShippingAndHandling extension point class couldn't perform HTTP/S callouts during Checkout flow.
W-7343677

Fixed an issue where the Checkout page didn't reliably load the account's default shipping or billing address. Previously, B2B Commerce for Visualforce allowed multiple shipping or billing account address book records to have the Default field set. This fix enforces a limit of one shipping and one billing account address book entry per account.

UPGRADE IMPACT: Edit the account address book record that you want to use for the default selected during checkout, and enable its Default field. B2B Commerce for Visualforce uses whichever record where Default was most recently enabled as the default address during checkout.
## 3.145.17—April 10, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-17 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-17
ID Fix
W-7401997

Fixed an issue where the CC Admin tab didn't load for a user whose admin profile didn't have Create access on the E_Foo__c object.

As a result of this change, a user with the admin profile can’t download files from CC Admin | Global Settings | Settings Loader.
W-7398539 Added an enhancement to reduce CPU usage when retrieving Schema information. For example, this fix applies when adding a product to a cart and validating the cart's currency ISO code against the org's Active Currencies.
W-7396478 Fixed an issue where the third line of a billing or shipping address didn't display in the order confirmation email.
W-7371918 Fixed an out-of-date URL in an Apex method comment.
W-7350567

Fixed an issue where the Reorder widget didn't show the correct recent order history for a selected effective account. This issue occurred when:

  1. The Filter Effective Account configuration of the My Account module was TRUE.
  2. The buyer placed an order from one child account.
  3. Then, the buyer selected a different effective child account.

The Reorder widget incorrectly showed all orders from the parent-child account hierarchy, instead of just the selected child account's orders.
## 3.145.15—March 17, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-15 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-15 | ID | Fix | | --- | --- | | W-7323750 | Fixed a rare issue that affected performance after migrating to sObject configuration from legacy page settings. | | W-7320777 | Fixed an issue where a standard storefront page executed the logic for returning the static, bot-enabled breadcrumb component. | ## 3.145.14—March 4, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-14 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-14
ID Fix
W-7246931 Fixed an issue where the Product List page (version 2.0 or 1.0) showed an incorrect product total. This issue occurred when the search results included a price list item with a Start Date value set to a future date.
W-7246924 Fixed an issue where the PDF sent from the Email Cart button on the Shopping Cart page didn't show product prices. This issue occurred when the schema setting, Restrict access to custom settings, was enabled. This schema setting was likely enabled in your org for the critical update, Require Customize Application Permission for Direct Read Access to Custom Settings.
W-7185761

Fixed an issue where a buyer wasn't able to add an aggregated product to a cart. This issue occurred if you previously installed B2B Commerce for Visualforce Summer ’19 (version 4.11) patch 3.145.13 or 3.145.12.

UPGRADE IMPACT: If you previously installed B2B Commerce for Visualforce Summer ’19 (version 4.9) patch 3.145.13 or 3.145.12, upgrade to this patch.
This patch also includes fixes originally available in patch 3.145.13.
ID Fix
W-7209148 Added an error message for the Shopping Cart page. The error appears when a cart item's Primary Attribute field doesn’t match the attributes in the corresponding price list item's Attribute Pricing field.
W-7181359 Added an error message that appears on the Forgot Password page when a buyer enters an invalid format for their email address.
W-7175766 Fixed an issue when pressing Enter (Windows) or Return (macOS) to rename a cart in the My Carts section of the My Account page. Pressing the keyboard button didn't apply the new name, and incorrectly redirected the buyer back to the My Account page.
W-7166397 Fixed an issue that caused anonymous users attempting to check out to be redirected to a Login page that didn't display their selected locale.
W-7138942 Fixed an issue where changing the storefront’s locale using the Locale Switcher widget dropped context-specific URL parameters from the current page. This issue forced the buyer to renavigate the storefront after selecting a locale.
W-7045007 Fixed an issue where the cart contents email sent from the Shopping Cart page didn’t show a unit price for an assembly product.
W-7018704

Fixed an issue in the Effective Account selector for an account name that contained a symbol (such as &). The account name rendered with the symbol’s HTML code (such as &amp;) instead of the symbol itself.

UPGRADE IMPACT: This fix updates the default EffAcctSel-Widget-View-Desktop Handlebars template. If you've previously overridden this default template, reimplement your customizations based on the fixed version of the default template. This step ensures that custom code in your solution receives the benefit of the fix.

This patch also includes fixes originally available in patch 3.145.12. | ID | Fix | | --- | --- | | W-7108826 | Fixed an issue where the Reorder widget failed to render due to a missing parameter. | | W-7040199 | Fixed an issue where B2B Commerce for Visualforce didn't properly post Google Analytics events based on product SKUs with only numeric characters, such as 123456. | ## 3.145.10—January 13, 2020 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-10 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-10
ID Fix
W-7074624 Fixed an issue where the Shopping Cart page (versions 2.0 and 1.0) removed items from the cart after updating cart item quantities to resolve validation errors.
W-7015925 Fixed an issue where the Product List page (version 1.0) performed a duplicate Apex remote action call. This issue occurred when the Join Filtering configuration of the Feature Filtering module was TRUE.
W-7000730 Fixed an issue where the Category Tree component wasn't included when overriding the default bot-enabled Home page, Product List page, or Product Detail page.
W-6985639 Fixed an issue where setting ccrz.ccApi.SZ_ASSC => false in the ccrz.ccApiCart.CLI_ENTITYNAME sizing map for a ccrz.ccApiCart.fetch() method call still completed the related call to the ccrz.ccApiProduct.fetch() method instead of skipping it.
W-6984928 Fixed an issue where a buyer couldn't switch between effective accounts when the Cart Mode configuration of the Effective Account module was set to SingleCart.
W-6971854 Fixed an issue where SEO metadata tags were empty when overriding the default bot-enabled Product Detail page.
W-6959093 Fixed an issue where the Save Address Book Default field failed. This issue occurred when a user that wasn't the Account owner attempted to manage the shared Account Address Book entries.
W-6763814

Replaced hard-coded text strings with the following localizable page labels:

  • LLI_CheckOut_Of in the Move Item window in LLI checkout
  • PaginatorOf on the Shipping step of LLI checkout
  • LLICheckout_SummaryWidget on the Shipping and Order Confirmation steps of LLI checkout
  • catalogSearchInc_QuickSearch in the Feature Filtering widget on the Product List page
## 3.145.9—December 16, 2019 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-9 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-9
ID Fix
Multiple items

Fixed several issues that ensure that guest users can continue to self-register and create carts after you complete the required security alerts for guest security.

UPGRADE IMPACT: Complete the following steps:

  1. Install patch 3.145.9 to upgrade the managed package. Be sure to update the available global data in the Data Loader page of CC Admin after you install the patch.
  2. Complete the steps in Resolve Guest User Security Alerts to Keep Your Storefronts Secure by Default in the B2B Commerce for Visualforce Release Notes and Upgrade Guide. These steps describe how to manually resolve each security alert.
## 3.145.8—November 26, 2019 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-8 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-8 | ID | Fix | | --- | --- | | W-6952413 | Improved cart performance by eliminating the `ccrz.ccApiCart.setActive()` refetch that occurs with each cart pricing call and removing the `ccrz.ccLogicCartSetActive` fetch of all cart, cart item, and product data. | ## 3.145.7—November 22, 2019 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-7 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-7 | ID | Fix | | --- | --- | | W-6875113 | Fixed an issue where a read-only wish list didn't display in the My Templates section of the My Account page. | ## 3.145.6—November 13, 2019 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-6 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-6 | ID | Fix | | --- | --- | | W-6830570 | Fixed an issue where B2B Commerce for Visualforce components in Experience Builder showed data from only the default storefront. If you have multiple sites and storefronts, this fix ensures that components correctly show data from whatever storefront is specified at the site's root domain. | ## 3.145.3—October 16, 2019 - Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-145-3 - Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-145-3
ID Fix
Multiple items

Fixed several issues that enhance the security of B2B Commerce for Visualforce custom objects against unauthorized access. These fixes don’t require any action after you upgrade.

This patch removes a requirement to have the View All Users permission enabled on your storefront’s guest user profile. This permission was previously required to work around a Digital Experiences security fix. This change ensures that you’re providing the least privilege to guest users to help keep your storefront data secure, while still supporting self-registration.

UPGRADE IMPACT: If you previously enabled the View All Users permission, update your guest user profile to disable the View All Users permission.
W-6593132 Fixed an issue where the picker dropdown for cloned wishlists didn't refresh upon refetch.
W-6546262

Fixed an issue where a product with a start date that’s valid for the current date didn’t appear on the storefront. This issue occurred because the product index included only price list items whose date ranges were valid for the time that the index was built. For example, a product with a start date of September 1 didn’t appear on the storefront on September 1, because the product index was built on August 15. With this fix, a price list item with a future Start Date is now included the next time you build a new product index.

If you start including future-dated products, the size of the index and time required to build it both increase.
W-6536719 Fixed an issue where the storefront reverted to the default locale after a buyer selected a non-default locale and then failed a login attempt. This issue occurred for storefronts that support more than one locale and have enabled the Locale Switcher widget.
W-6536705 Fixed an issue where using ccrz.ccApiCoupon.remove() to remove a coupon didn't always clear the AbsoluteDiscount__c, PercentDiscount__c, and Coupon__c fields.
W-6536700 Fixed a rare issue where the Product List page timed out while querying for products and filters.