---
schema_version: "1"
id: 2e01449df4c5984431a98d57e30709e8dcba030ce4c1f27e5adc6fa546d7e102
title: AppServer
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_20_9_appserver.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_20_9_appserver.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 6e3d6fb1444c2e0af29bb7171408e532868ebc891648e44a9206b93616c466f1
description: Review the new B2C Commerce AppServer features in the 20.9 release.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# AppServer

Review the new B2C Commerce AppServer features in the 20.9 release.

- **[Easily View and Download Files](https://help.salesforce.com/s/articleView?id=commerce.b2c_20_9_w7756732_file_browser_la.htm&release=264.0.0&type=5)**  
    Use the new folder browser feature in Business Manager instead of a WebDAV client to view and download files such as log files. The folder browser lets you quickly and easily view and download files that you have WebDAV permissions for.
- **[JavaScript in HTML Attributes Allowed Only with Strong Authentication](https://help.salesforce.com/s/articleView?id=commerce.b2c_20_9_w7874006_javascript_in_html_la.htm&release=264.0.0&type=5)**  
    Beginning with this release, for security reasons, only Business Manager users with strong authentication, such as through multi-factor authentication with Account Manager, can embed JavaScript in HTML attributes. To make it easier to adjust to this change, a Business Manager user with strong authentication can temporarily allow users without strong authentication to include JavaScript in HTML attributes.
- **[Check Configuration for Secure Code Uploads](https://help.salesforce.com/s/articleView?id=commerce.b2c_20_9_w7874023_code_uploads_la.htm&release=264.0.0&type=5)**  
    Two-factor authentication (2FA) for code uploads to the staging instance is required. Direct code uploads to the production instance aren’t allowed. Starting August 10, 2020, we automatically make configuration changes to meet these requirements on instances not in compliance.