--- schema_version: "1" id: 4b6a9827068520adda3182b29f563b8ee0c6e1b45f8cb14dadca8f6ffc32ecb0 title: Patch Notes for CloudCraze 4.7 collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/cloudcraze_4_7_patches.md canonical_url: https://help.salesforce.com/s/articleView?id=commerce.cloudcraze_4_7_patches.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: c7a333d5767fccba7bbffa7dd4849a0639bd2458ff759b4cb3e6128bb32282b3 description: Patch notes for CloudCraze. products: - Commerce - B2B Commerce release: "264" --- # Patch Notes for CloudCraze 4.7 Patch notes for CloudCraze. ### Required Editions
Salesforce Compatibility Salesforce Classic and Lightning Experience for Enterprise, Performance, Unlimited, and Developer editions.

B2B Commerce Compatibility

Any org installing a patch for CloudCraze 4.7
![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-b2b_commerce_release_notes-264-0-0-production-enus/dd2bc651-f664-4278-bce2-a3d325362afb/images/icon_important.png) Important These patch notes are provided for maintaining existing CloudCraze 4.7 solutions. However, most information in these help topics applies only to B2B Commerce for Visualforce Summer ’18 (version 4.9) or later. ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-b2b_commerce_release_notes-264-0-0-production-enus/dd2bc651-f664-4278-bce2-a3d325362afb/images/icon_tip.png) Tip - If you install a particular build in a sandbox and test and validate against that version, ensure that you also install the _same_ build in production. For example, if you install build 3.133.2 in a sandbox, ensure that you also install build 3.133.2 in production. - The installation URLs for these patches—in either a sandbox org or production org—are available only by submitting a case through Support & Services. ## 3.124.46—January 4, 2024
ID Fix
W-14596723

Added the ability to filter the static resources that the ccrz.cc_util_UserInterface API utility class queries. This query includes static resources that contain your storefront's product images, theme files, and so on. This enhancement works around limits in your org if you've installed multiple managed packages, and allows you to specify the static resource namespaces that you want to query.

UPGRADE IMPACT: To implement this filter in your org, create metadata for a new configuration in the User Interface module that uses the API name nsList. Then, in your storefront settings, set the value of this configuration to a comma-separated list of the namespaces that you want to query. Avoid spaces between comma values, and be sure to include the default ccrz namespace in the list. For example, enter ccrz,other-namespace where other-namespace is a custom namespace that you want to include. For more information, see Create Metadata for the Namespace List Configuration Added in a Patch in the B2B Commerce for Visualforce Release Notes and Upgrade Guide.

W-14307535 Fixed an issue with minified JavaScript in the classic interface. This change updates the minified ccrz-libs-min.js for the classic interface to include version 1.13.1 of underscore.js.
## 3.124.45—April 4, 2023 | ID | Fix | | --- | --- | | W-11148807 | Upgraded the versions of these JavaScript libraries distributed with the managed package: jquery-ui-custom.js from 1.12.1 to 1.13.2 and jquery.validate.js from 1.14.0 to 1.19.5. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the [jquery-ui.js release notes](https://jqueryui.com/changelog/1.13.2/) and [jquery.validate.js](https://github.com/jquery-validation/jquery-validation/releases/tag/1.19.5) release notes. | ## 3.124.43—December 16, 2021 | ID | Fix | | --- | --- | | W-9877356 | Upgraded the versions of these JavaScript libraries distributed with the managed package: handlebars.js from 4.7.6 to 4.7.7 and underscore.js from 1.8.3 to 1.13.1. This change updates the `ccrz.cc_hk_UserInterface.standardIncludes` method for both the Bootstrap 3 and classic interfaces. For more information about the changes in these versions, see the [handlebars.js release notes](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md) and [underscore.js release notes](https://github.com/jashkenas/underscore/releases/tag/1.13.1). | | W-9811717 | Fixed a potential vulnerability related to the My Orders section of the My Account page. | | W-9811547 | Fixed an issue where an admin could potentially inject cross-site scripting (XSS) when creating custom configuration modules. | ## 3.124.42—March 25, 2021
ID Fix
W-8951198 Fixed an issue where initializing data from CC Admin failed for a new installation of CloudCraze 4.7.
W-8509436

Upgraded the version of the following default third-party JavaScript libraries that the managed package distributes:

  • bootstrap.js to 3.4.1 (for Bootstrap 3-enabled themes only)
  • handlebars.js to 4.7.6
  • jquery-ui-custom.js to 1.12.1

This change updates the ccrz.cc_hk_UserInterface.standardIncludes extension point method. For more information about the changes in these versions, see the appropriate release notes:
W-8115350 Fixed an issue where a subscription for a kit or dynamic kit didn't correctly evaluate recurring cost when adding to a cart or after pricing the cart.
## 3.124.40—September 24, 2020
ID Fix
W-7976779

Enabled the Secure attribute for the following cookies:

  • apex__cc_anonymous_Country
  • apex__cc_anonymous_Currency
  • apex__cclgtkn
  • apex__currCartId
  • apex__effacc
  • apex__CSRportalUserId

This attribute ensures that the managed package sends cookie data securely through an encrypted request over HTTPS protocol. For more information, see:
W-7566546

Updated the default ccrz.cc_hk_UserInterface extension point class to distribute the latest stable, secure versions of jQuery (3.5.1) and jQuery Migrate (3.3.0).

UPGRADE IMPACT: This upgrade also introduces a breaking change where non-void HTML elements that use self-closing tags, such as <div/>, no longer render. This HTML compatibility change affects the default Handlebars templates included in the managed package, and can affect front-end extensions or customizations that you've already developed. For more details about the jQuery upgrade and the impact on the HTML used in your storefront, see the Salesforce Knowledge article, Upgrade to jQuery 3.5.1 in B2B Commerce for Visualforce Spring ’20 (Version 4.12) or Earlier.
## 3.124.38—June 9, 2020
ID Fix
W-7453586

Fixed potential security vulnerabilities in some extension point classes.

UPGRADE IMPACT: This fix deprecates the ccrz.cc_hk_EffectiveAccount.fetchAccountData() method.
W-7371936 Fixed an out-of-date URL in an Apex method comment.
## 3.124.37—February 10, 2020 | ID | Fix | | --- | --- | | W-7201770 | Fixed a rare issue where reassigning record ownership caused checkout to fail after resolving security alerts for guest user access. | ## 3.124.36—January 3, 2020
ID Fix
Multiple items

Fixed several issues that ensure that guest users can continue to self-register and create carts after you complete the required Communities security alerts for guest security.

UPGRADE IMPACT: Complete the following steps:

  1. Install patch 3.124.36 to upgrade the managed package.
  2. Create metadata for the Default Record Owner configuration in the User Profile (Registration) module. See Create Metadata for the Namespace List Configuration Added in a Patch in the B2B Commerce for Visualforce Release Notes and Upgrade Guide
  3. Complete the steps in Resolve Guest User Security Alerts to Keep Your Storefronts Secure by Default in the B2B Commerce for Visualforce Release Notes and Upgrade Guide. These steps describe how to manually resolve each security alert.
  4. Complete the steps in Update Order Confirmation Email Permissions in the B2B Commerce for Visualforce Release Notes and Upgrade Guide.
## 3.124.35—October 16, 2019
ID Fix
Multiple items

Fixed several issues that enhance the security of CloudCraze custom objects against unauthorized access. These fixes don’t require any action after you upgrade.

This patch removes a requirement to have the View All Users permission enabled on your storefront’s guest user profile. This permission was previously required to work around a Salesforce Communities security fix. If you previously enabled this permission, update your guest user profile to disable the View All Users permission. This change ensures that you’re providing the least privilege to guest users to help keep your storefront data secure, while still supporting self-registration.
## 3.124.32—July 16, 2019 | ID | Fix | | --- | --- | | W-6312072 | Fixed an issue where the estimated tax amount that’s calculated during checkout could be circumvented. | ## 3.124.31—March 7, 2019 | ID | Fix | | --- | --- | | W-5891277 | Fixed an issue where the Quick Order widget showed the incorrect SKU in an error message. This issue occurred when a storefront user added one valid SKU and one invalid SKU in the Quick Order widget. The widget's error message about the invalid SKU incorrectly referenced the valid SKU. | ## 3.124.30—November 27, 2018 | ID | Fix | | --- | --- | | W-5627965 | Fixed an issue where the Shopping Cart page showed an error about an invalid item and checkout was disabled. This issue occurred when a buyer added a bundle that included a composite product whose status is Not Orderable. | ## 3.124.29—August 22, 2018 | ID | Fix | | --- | --- | | W-5354919 | Fixed an issue where the My Orders section of the My Account page showed an error. This issue occurred Filter Orders Based on Owner storefront setting was disabled and an account had more than 200 contacts relationships. | ## 3.124.27—July 12, 2018 | ID | Fix | | --- | --- | | W-5172229 | Fixed an issue where an effective account's billing and shipping addresses weren't updated before starting the checkout process. This fix invokes the `ccrz.cc_hk_EffectiveAccount.saveCart` method from the Shopping Cart page. | ## 3.124.26 | ID | Fix | | --- | --- | | PATCH-3369 | Fixed an issue where a product quantity rule defaulted to an increment of 1 when a buyer clicked Add to Cart with a specified quantity of 0. This fix applies the specified increment value instead of 1. | | PATCH-3345 | Fixed multiple potential vulnerabilities related to cross-site scripting (XSS), and enforced a sharing rule to meet security standards. | ## 3.124.24 | ID | Fix | | --- | --- | | PATCH-3250 | Fixed an issue where the Order Review section of the Checkout page didn't show the Requested Delivery Date field. This issue occurred only on a mobile device for a storefront using the classic interface. | ## 3.124.23 | ID | Fix | | --- | --- | | PATCH-3232 | Fixed issue where the pricing feature filter slider didn't show on Product List Page for Microsoft® Internet Explorer® 11. | | PATCH-3220 | Updated the apex\_\_currCartId cookie so that its path uses a community site URL prefix instead of a fully qualified URL. | | PATCH-3184 | Increased the timeout for the `fetchCart` remote action on the Shopping Cart page to 120 seconds. | ## 3.124.19 | ID | Fix | | --- | --- | | PATCH-3130 | Updated the `ccrz.ccApiCart.place` method to respect the order status input parameter `ccrz.ccApiOrder.PARAM_ORDER_STATUS`. | | PATCH-3118 | Fixed an issue where CSR flow resulted in redundant cart header fetches when the cardId URL parameter was empty or missing. | | PATCH-3104 | Fixed an issue where the Slider filter type for spec values on the Product List page didn't render correctly. This issue occurred only on a storefront that uses the Bootstrap 3 interface. | ## 3.124.18 | ID | Fix | | --- | --- | | PATCH-3056 | Fixed an issue where a product search returned a No results found message when the search didn't return any entitled products. | | PATCH-3020 | Updated the Home page so that `` elements in the HTML `` reference the SEO keywords and description specified in your storefront's general settings. | | PATCH-2996 | Fixed an issue where Forgot Password page didn't render from the Reset Password email. This fix updates the default routing for storefront associations when the storefront URL parameter is empty or missing. | | PATCH-2978 | Updated the ccrz.CCSiteIndex and ccrz.CCCatSiteMap Visualforce pages to render the XML UTF-8 declaration. | ## 3.124.17 | ID | Fix | | --- | --- | | PATCH-2972 | Fixed an issue where a cart total coupon didn't correctly apply the discount. This issue occurred when the coupon discounted the cart total lower than the coupon's Cart Total Amount criteria. | ## 3.124.16
ID Fix
PATCH-2895 Fixed an issue where placing an order didn't correctly update a coupon's usage count.
PATCH-2877

Fixed an issue that affected the page label in confirmation window when deleting a stored payment from the My Wallet section of the My Account page.

UPGRADE IMPACT: This fix applies an updated id="myWalletModalLabel" attribute to the confirmation window title's <h4> element. If you previously developed any custom CSS or JavaScript based on attribute, update your customizations to evaluate the new attribute value.

PATCH-2871 Fixed an issue where a promotion that linked to an external link didn't allow an ampersand character (&).
PATCH-2865 Fixed an issue where a coupon cart item's currency code didn't match the cart's currency code when a buyer applied the coupon.
PATCH-2827 Fixed an issue where a buyer couldn't add a bundle with subscription terms to the cart.
PATCH-2820 Fixed an issue where a redundant My Wallet section was available for a guest buyer in the Payment section of the Checkout page.
PATCH-2802 Fixed an issue where the cart identified a dynamic kit with subscription terms as an invalid cart item.
PATCH-2784 Fixed an issue where a spec-based coupon didn't properly validate minimum quantity across multiple cart items.
PATCH-2766 Fixed an issue where the Product Detail page didn't display correctly for a product with a plus sign in its SKU.
PATCH-2760 Fixed API version 6 or later for the ccrz.ccApiProduct.fetch method to exclude untitled composite products for fetched component products.
PATCH-2748 Updated the place order logic to set the request date on order items to the requested delivery date selected during checkout.
PATCH-2711 Fixed an issue where a cloned featured product showed an incorrect short description.
PATCH-2699 Fixed an issue where a REST API user couldn't add a product with attributes to the cart.
PATCH-2637 Fixed an issue where a contract price didn't display on its specified Start Date.
PATCH-2255 Fixed an issue where a promotion with Location Type set to Banner didn't display on the Home page. This issue occurred only on a storefront that uses the Bootstrap 3 interface.
## 3.124.13 | ID | Fix | | --- | --- | | PATCH-2754 | Fixed an issue where the Order Details page didn't show the expected Order Item Status field value. | | PATCH-2687 | Fixed an issue where the default `ccrz.cc_hk_TaxCalculation` extension point class didn't evaluate the Skip Tax Calculation storefront setting. With this fix, the Order Review section of the Checkout page no longer resets the cart's tax amount. | | PATCH-2668 | Fixed an issue where updating a cart that contains attribute-driven commerce products didn't work correctly for some browsers. | ## 3.124.10
ID Fix
PATCH-2662 Fixed an issue where the Search Box widget in the header didn't support certain special characters.
PATCH-2650 Improved performance for API versions 3–6 of the ccrz.ccApiProduct.fetch method.
PATCH-2607

Fixed an issue where pagination controls didn't display on the My Templates section of the My Account page. This issue occurred even when the Pagination configuration the Wishlists/Templates module was TRUE.

UPGRADE IMPACT: After you install the patch, edit the configuration metadata for the Pagination configuration of the Wishlists/Templates module so that Externally Safe is enabled. This change correctly enables pagination in the My Templates section of the My Account page.
## 3.124.7
ID Fix
PATCH-2569 Fixed an issue where a REST API call returned a potentially confusing application/octet-streams response. With this fix, a REST API call now returns Content-Type: application/json.
PATCH-2533

Fixed an issue where the Featured Products widget showed two columns, even when configured to show a different number.

UPGRADE IMPACT: This fix ensures that the default Handlebars templates respect the Number Of Columns configuration value. If you've customized the default Handlebars templates, considering updating your customizations to reference this configuration.
PATCH-2222 Increased the amount of feature filters data that the Product List page can retrieve and show.
## 3.124.5 | ID | Fix | | --- | --- | | PATCH-2546 | Fixed an issue that affected the accuracy of quantities of component products in a composite product (such as kit or bundle). This issue occurred when a buyer added the composite product to the cart. | | PATCH-2540 | Updated the `ccrz.ccApiOrder.canCancel` method to reference more `ccrz__E_Order__c` data. | | PATCH-2414 | Fixed an issue that affected how the promotion API respected attachments for internationalization fallback behavior. | ## 3.124.4 | ID | Fix | | --- | --- | | PATCH-2507 | Updated the Configuration Cache Management section of the CC Admin Global Settings to show when a new cache entry was canceled. You can cancel the configuration cache job from Apex Jobs under Setup. | | PATCH-2472 | Added an option to skip updating breadcrumb paths when refreshing the category index in CC Admin. | ## 3.124.3
ID Fix
PATCH-2526 Fixed an issue where the ccrz.cc_api_CartExtension extension hook class didn't allow the buyer to check out.
PATCH-2519 Fixed an issue where a buyer could apply a coupon even after the coupon expired.
PATCH-2395

Fixed an issue where a guest buyer lost their cart. This issue occurred when the following conditions were true:

  • The Redirect To Login configuration of the User Profile (Registration) module (ur.dirlogin) is TRUE.
  • The guest buyer registered for a storefront account after clicking Checkout from the Shopping Cart page.
## 3.124.2 | ID | Fix | | --- | --- | | PATCH-2426 | Updated the `ccrz.ccServicePL6.fetch` data service provider method to control the amount of Salesforce heap space used for larger data sets. | ## 3.124.1 | ID | Fix | | --- | --- | | PATCH-2358 | Fixed an issue where the Site Register page required the Company field even when E-Commerce Type storefront setting was set to B2C. | | PATCH-2352 | Updated the `ccrz.ccApiCart.fetch` method to return the availability message, if specified, for products in the cart. | | PATCH-2334 | Fixed an issue where the My Subscriptions section of the My Account page didn't hide the Actions column. This issue occurred even when the My Subscriptions configuration of the Show Actions Column module (`shact.subs`) was FALSE. | | PATCH-2267 | Fixed an issue where the Home page didn't show a promotion with a Location Type value of Banner. This issue occurred only on a storefront that uses the Bootstrap 3 interface. |