PrismWeb Release Notes May 19, 2019

Enhancements

Implementation of the IFrame enhancement for payment page.
Various enhancements have been added to increase PrismWeb Security:
- Removed the shopper's shipname from the PrismWeb Forgot Password Email To field.
- Removed fields that could be vulnerable to cyberattack in the "Sign Up for Email" newsletter form in the PrismWeb footer.
- Mitigate the risk for cross-site scripting in URLs.
- Mitigate the risk for cross-site scripting Swap Textbooks.

The option was added to PrismWeb Manager that allows a store to suspend sales on the PrismWeb customer site. When sales are suspended, the Checkout button on the cart page is disabled, and an informative message can be displayed for customers.
- On the PrismWeb Manager > Setup > Site Options > System Setup page, the Suspend Sales parameters include:
  - Suspend Sales - When set to Yes, the Checkout button is disabled on the PrismWeb cart page, and the Suspend Sales Message is displayed below the Checkout button. If set to No, the Checkout button is active on the PrismWeb cart page, and the Suspend Sales Message is not displayed.
  - Suspend Sales Message - Input a message to display below the disabled Checkout button when Suspend Sales is set to Yes. The message cannot exceed 500 characters.

Previously the Featured Item Carousel did not take into account inventory tolerance for a product when determining if it should be displayed. After the fix, the inventory tolerance for a product will be included as a factor for display in the featured items carousel on PrismWeb.

Additional addresses have been added to the No Ship List per specific campus request

Previously when the footer link was selected, the header on the site_customer_service.asp page was misaligned. This has been corrected to improve the user experience.

In PrismWeb Manager, a spelling error is corrected in the message, "ERROR: There term cut off date may not be set and the default cut off date has already passed." The error message is now, "ERROR: The term cut off date might not be set and the default cut off date has already passed."