Patch Notes for B2B Commerce for Visualforce Winter ’21 (Version 4.13)

Patch notes for B2B Commerce.

Required Editions

Salesforce Compatibility Salesforce Classic and Lightning Experience for Enterprise, Performance, Unlimited, and Developer editions.

B2B Commerce Compatibility

Any org updating to or installing a patch for B2B Commerce for Visualforce Winter ’21 (version 4.13)

Tip

If you install a particular build in a sandbox and test and validate against that version, ensure that you also install the same build in production. For example, if you install build 3.149.1 in a sandbox, ensure that you also install build 3.149.1 in production.
Make sure that you find the correct link for your org type before you proceed with installing a patch. For example, if you're already logged in to a production org, select the URL for a production org, not a sandbox. Reverting or canceling an installation isn't always possible..
If you're installing B2B Commerce for Visualforce for the first time, install the most recent patch so that your implementation has the latest fixes. First, complete the Set Up a Storefront steps in the B2B Commerce for Visualforce Help, and then complete any required upgrade steps for each patch that precedes the build you installed.
Some fixes update default handlebars.js templates that render components on the storefront. If you've previously overridden a default template that receives a fix, reimplement your customizations based on the fixed version of the default template. This step ensures that custom code in your solution receives the benefit of the patch's fix.

3.149.13—August 17, 2023

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-13
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-13

ID	Fix
W-13907587	Fixed an issue where a product URL in some Lightning components for B2B Commerce for Visualforce didn't resolve correctly. This issue affected the links to products in the B2B Commerce Featured Products and B2B Commerce Spotlight Product components.

3.149.12—June 30, 2023

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-12
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-12

ID Fix

W-13547255 Fixed a potential vulnerability related to cross-site scripting (XSS).

W-13464590 Upgraded the versions of these JavaScript libraries distributed with the managed package: jquery-ui-custom.js from 1.13.1 to 1.13.2 and jquery.validate.js from 1.19.4 to 1.19.5. This change updates the ccrz.cc_hk_UserInterface.standardIncludes method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the jquery-ui.js release notes and jquery.validate.js release notes.

ID	Fix
W-13547255	Fixed a potential vulnerability related to cross-site scripting (XSS).
W-13464590	Upgraded the versions of these JavaScript libraries distributed with the managed package: `jquery-ui-custom.js` from 1.13.1 to 1.13.2 and `jquery.validate.js` from 1.19.4 to 1.19.5. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the jquery-ui.js release notes and jquery.validate.js release notes.

3.149.10—June 23, 2022

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-10
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-10

ID Fix

W-11148626 Upgraded the versions of these JavaScript libraries distributed with the managed package: jquery-ui-custom.js from 1.12.1 to 1.13.1 and jquery.validate.js from 1.19.2 to 1.19.4. This change updates the ccrz.cc_hk_UserInterface.standardIncludes method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the jquery-ui.js release notes and jquery.validate.js release notes.

ID	Fix
W-11148626	Upgraded the versions of these JavaScript libraries distributed with the managed package: `jquery-ui-custom.js` from 1.12.1 to 1.13.1 and `jquery.validate.js` from 1.19.2 to 1.19.4. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the jquery-ui.js release notes and jquery.validate.js release notes.

3.149.9—April 21, 2022

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-9
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-9

ID Fix

W-10735876

ID	Fix
W-10735876	Added the ability to filter the static resources that the `ccrz.cc_util_UserInterface` API utility class queries. This query includes static resources that contain your storefront's product images, theme files, and so on. This enhancement works around limits in your org if you've installed multiple managed packages, and allows you to specify the static resource namespaces that you want to query. UPGRADE IMPACT: To implement this filter in your org, create metadata for a new configuration in the User Interface module that uses the API name `nsList`. Then, in your storefront settings, set the value of this configuration to a comma-separated list of the namespaces that you want to query. Avoid spaces between comma values, and be sure to include the default `ccrz` namespace in the list. For example, enter `ccrz,other-namespace` where `other-namespace` is a custom namespace that you want to include. For more information, see Create Metadata for the Namespace List Configuration Added in a Patch in the B2B Commerce for Visualforce Release Notes and Upgrade Guide.
W-9904369	Fixed an issue with line-level independence (LLI) checkout where moving an item to a different shipping group didn't copy the country specified in the original shipping group.

Added the ability to filter the static resources that the ccrz.cc_util_UserInterface API utility class queries. This query includes static resources that contain your storefront's product images, theme files, and so on. This enhancement works around limits in your org if you've installed multiple managed packages, and allows you to specify the static resource namespaces that you want to query.

UPGRADE IMPACT: To implement this filter in your org, create metadata for a new configuration in the User Interface module that uses the API name nsList. Then, in your storefront settings, set the value of this configuration to a comma-separated list of the namespaces that you want to query. Avoid spaces between comma values, and be sure to include the default ccrz namespace in the list. For example, enter ccrz,other-namespace where other-namespace is a custom namespace that you want to include. For more information, see Create Metadata for the Namespace List Configuration Added in a Patch in the B2B Commerce for Visualforce Release Notes and Upgrade Guide.

W-9904369 Fixed an issue with line-level independence (LLI) checkout where moving an item to a different shipping group didn't copy the country specified in the original shipping group.

3.149.8—October 27, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-8
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-8

ID Fix

W-9959967 Added the @JsonAccess annotation to the default definitions of several utility classes in the B2B Commerce for Visualforce API. This change affects bean classes such as ccrz.cc_bean_CartItem, remote action classes such as ccrz.cc_RemoteActionContext, and certain subclasses, such as ccrz.ccApiCart.LineData. If you created any extensions that serialize or deserialize affected Apex objects, this fix restores the behavior from previous versions of B2B Commerce for Visualforce. For more information about the @JsonAccess annotation, see JsonAccess Annotation in Salesforce Developers documentation.

ID	Fix
W-9959967	Added the `@JsonAccess` annotation to the default definitions of several utility classes in the B2B Commerce for Visualforce API. This change affects bean classes such as `ccrz.cc_bean_CartItem`, remote action classes such as `ccrz.cc_RemoteActionContext`, and certain subclasses, such as `ccrz.ccApiCart.LineData`. If you created any extensions that serialize or deserialize affected Apex objects, this fix restores the behavior from previous versions of B2B Commerce for Visualforce. For more information about the `@JsonAccess` annotation, see JsonAccess Annotation in Salesforce Developers documentation.

3.149.7—September 27, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-7
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-7

ID	Fix
W-9811670	Fixed a potential vulnerability related to the My Orders section of the My Account page.
W-9811563	Fixed a potential vulnerability related to cross-site scripting (XSS) when modifying storefront settings in CC Admin.
W-9811503	Fixed an issue where an admin could potentially inject cross-site scripting (XSS) when creating custom configuration modules.
W-9788517	Updated the label for the `pri.masterpl` configuration setting to use the term Primary instead of Master. The new complete label is Create Primary Index for All Currencies. For compatibility, the API name for this configuration remains `pri.masterpl`.
W-9162616	Fixed an issue where a guest user could get stuck during checkout. This issue occurred when the Address Owned by User configuration of the Checkout module (`co.uown`) was `TRUE` and the Allow Anonymous Checkout option in storefront settings was enabled.

3.149.6—August 25, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-6
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-6

ID	Fix
W-9775967	Upgraded the versions of these JavaScript libraries distributed with the managed package: `handlebars.js` from 4.7.6 to 4.7.7 and `underscore.js` from 1.11 to 1.13.1. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the handlebars.js release notes and underscore.js release notes.
W-9729026	Fixed an issue where the State dropdown menu incorrectly renders on the Checkout page. This issue occurred only in standard checkout when the Country dropdown menu didn't support selecting the United States. This fix updates the `CCRZ.views.UserInfoView` functions in the `ccrz.CheckoutNew` Visualforce page.
W-9705485	Fixed an issue where the Add to Wishlist button didn't appear for cart items on the Scaled Cart page. This issue occurred even when the Show Add Button configuration of the Wishlists/Templates module (`wl.pkron`) was `TRUE`.

3.149.4—July 20, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-4
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-4

ID	Fix
W-9493068	Fixed an issue where the See All Invoices link on an invoice's details in the My Invoices section of the My Account page didn't work correctly. With this fix, the See All Invoices link correctly navigates back to the full list of invoices. This fix updates the default Handlebars template `InvoicePayment-Single-Desktop`.

3.149.3—July 1, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-3
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-3

ID Fix

W-9288787 Fixed an issue where a buyer was redirected to the CC Site Login page instead of the storefront's Visualforce Home page after they selected an effective account. This issue occurred only for a storefront that didn't allow guest buyers and had configured their Experience Cloud site home page to use the CC Site Login page. In this scenario, the expected behavior after selecting an effective account was that the buyer was redirected to the storefront's Visualforce Home page. This fix ensures the expected behavior for an effective account.

W-9231601 Fixed an issue where the quantity of a selected product in a dynamic kit didn't update correctly if the same product was already selected and had a quantity specified. This issue occurred only when the Dynamic Kit Flow Enabled configuration was TRUE and the storefront used a Bootstrap 3-enabled theme.

ID	Fix
W-9288787	Fixed an issue where a buyer was redirected to the CC Site Login page instead of the storefront's Visualforce Home page after they selected an effective account. This issue occurred only for a storefront that didn't allow guest buyers and had configured their Experience Cloud site home page to use the CC Site Login page. In this scenario, the expected behavior after selecting an effective account was that the buyer was redirected to the storefront's Visualforce Home page. This fix ensures the expected behavior for an effective account.
W-9231601	Fixed an issue where the quantity of a selected product in a dynamic kit didn't update correctly if the same product was already selected and had a quantity specified. This issue occurred only when the Dynamic Kit Flow Enabled configuration was `TRUE` and the storefront used a Bootstrap 3-enabled theme.

3.149.2—May 19, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-2
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-2

ID	Fix
W-9190629	Fixed an issue where the bot-enabled Product Detail page didn't load when the product specified a decimal value for a spec that used the Slider filter type.
W-8951263	Fixed an issue where the Shopping Cart page returned an error. This issue occurred after a buyer added a kit to the cart, the kit's price list item expired, and the buyer attempted to reload the Shopping Cart page. This issue affected the following versions of the Shopping Cart page: Scaled Cart page with synchronous pricing Shopping Cart page version 2.0 Shopping Cart page version 1.0

Fix

W-9190629

Fixed an issue where the bot-enabled Product Detail page didn't load when the product specified a decimal value for a spec that used the Slider filter type.

W-8951263

Fixed an issue where the Shopping Cart page returned an error. This issue occurred after a buyer added a kit to the cart, the kit's price list item expired, and the buyer attempted to reload the Shopping Cart page. This issue affected the following versions of the Shopping Cart page:

Scaled Cart page with synchronous pricing
Shopping Cart page version 2.0
Shopping Cart page version 1.0

3.149.1—April 20, 2021

Sandbox org URL: https://sfdc.co/b2bcommerce-pkg-sandbox-3-149-1
Production org URL: https://sfdc.co/b2bcommerce-pkg-prod-3-149-1

ID	Fix
W-9081892	Fixed an issue where autocomplete suggestions displayed on top of the Quick Order widget's input field, rather than below the field as expected.
W-9077008	Fixed an issue where autocomplete results in search boxes weren't compatible with contract pricing entitlements. With this fix, autocomplete is now compatible with contract pricing by default. This change affects autocomplete in the following components: Search Box in the header Search Box widget in a page column Quick Order widget in a page column Search Box widget in the B2B Commerce Header component for an Experience Builder page
W-9067854	Fixed an issue where the Search Within filter on the Product List page version 1.0 didn't update the number of matching results shown on the page. This issue occurred only when a buyer searched within a category using a query that matched a product that existed in the catalog but that wasn't included in the current category.
W-9057285	Fixed an issue where the B2B Commerce Spotlight Product and B2B Commerce Featured Products components in an Experience Builder page didn't navigate to the Product Detail page on the Visualforce storefront as expected.
W-8875804	Fixed an issue where older versions of the `ccrz.ccApiCart.fetch` global API method weren't compatible with the `ccrz.cc_hk_TaxCalculation.getTaxAmount` extension point method. This issue affected functionality of the Avalara AvaTax for B2B Commerce market template.