/
🖥️ PowerFolder Server 23 SP3

🖥️ PowerFolder Server 23 SP3

  • Verified

    •  

     

    • Release Date: October 2025

    • Build Number: 23.3.101

    • Type: Hotfix Release

    📦 Download Links (available soon)

    ⬆️ Upgrade Information

    • Please read this complete Release Notes and instructions before upgrading.

    • Please follow the regular upgrade documentation for Windows or Linux

    • Upgrading any previous version higher or equal to version 16.0.100

    • Cluster: Running different versions on the servers in the cluster is supported but limited to version >= 22.0.100

    🔒Support for HARICA SSL Certificates

    In this server and desktop client version, the new certificate manager is active and uses both custom root certificates and system certificates (Windows & macOS).

    For Linux/Server systems, the file jre/lib/security/cacerts must be replaced or updated.
    FYI: The required cacerts can be downloaded here.

    🛡️Content Security Policy (CSP) Protection

    To enhance security against Cross-Site Scripting (XSS) and other injection attacks, the application supports enabling Content Security Policy (CSP) headers. CSP allows the browser to restrict which content sources (scripts, styles, images, etc.) are allowed to load, preventing malicious scripts from executing.

    Configuration

    The CSP mechanism can be controlled via configuration flags in your server configuration file:

    # Enable or disable Content Security Policy web.csp.enable=true # Run in report-only mode or enforce policy web.csp.report_only=false

    Options

    • web.csp.enable

      • Default: true

      • Enables CSP headers in responses.

      • Set to false to completely disable CSP protection (not recommended).

    • web.csp.report_only

      • Default: false

      • When false, CSP violations will block content that does not comply with the policy.

      • When true, CSP runs in Report-Only mode: violations are logged/reported, but the browser does not block the content.

      This is useful for debugging potential CSP false positives without breaking user functionality.

    🔍Sorting Accounts with Queries

    You can control how account lists are sorted by adding a sorting directive to your search query.

    How it works

    • Use sortup:<field> to sort in ascending order

    • Use sortdown:<field> to sort in descending order

    • You can combine the directive with a search term, or use it on its own

    Examples

    • gmail sortdown:username → shows accounts matching “gmail”, sorted by username descending

    • sortup:registerDate → all accounts sorted by registerDate ascending

    • John sortdown:lastLoginDate → accounts with “John”, sorted by lastLoginDate descending

    Sortable fields

    The following property names can be used in sorting directives:

    • username

    • firstname

    • surname

    • telephone

    • language

    • ldapDN

    • registerDate

    • lastLoginDate

    • notes

    • basePath

    Default

    If no sorting directive is added, accounts are sorted by username ascending.

    🌐 Translations

    We have added the following translations in web portal:

    • French

    • Italian

    • Spanish

    • Dutch

    • Turkish

    🔄 Javascript in Email Templates

    The email templates are also improved, please update the email templates or delete the old templates.

    📂 Enhancements in Database for Sub-Folder Sharing

    In this version, major changes have been made to the database tables. New columns and entries have been added to support versioning and preparations for sub-folder sharing in upcoming releases. These changes are backward-compatible, even if the admin decides to downgrade the server.

    ⚠️ Logging - "Missing Account Information"

    Admins will get the above stated log entries in this version, this is only for debugging purpose. To turn off these log entries please add the following parameter to JMX:

    -Dpowerfolder.feature.FILEINFO_LOG_MISSING_MODIFIED_BY_ACCOUNT=false  

    📄 Logging - Folder Metadata

    Folder metadata logging is now more detailed in preparation for upcoming subfolder and sharing features.

    You may see entries like:

    • "Found newer version in memory. in DB"

    • "Storing"

    • "Rename (forced internalize)"

    These are informational only and not errors.
    Support packages remain helpful for troubleshooting.

    🔄 Cloud Trial User Notification Fix

    Description:
    In case users on the cloud service receive web notifications/banner to update the user account.

    Resolution:
    To address this issue, please update affected user records directly using the following SQL query:

    SELECT count(*) FROM Account WHERE proUser = false;

    if results yields not 0 please execute the following SQL:
    UPDATE Account SET proUser = true;

    ⬇️ Downgrade Information (optional)

    • In case a downgrade to a previous version is necessary:

      • For a downgrade, you have to review our downgrade documentation.

      • Simply replace the PowerFolder-Server.jar file with that from the previous version you would like to run.

    • Log messages due to the higher schema version of database can be ignored:

      • [DatabaseMigrator]: Database layout version is newer than expected.

    📜Changelog

    • PFS-4616: Fix duplicate federated folders

    • PFS-2853: Fix cut and paste of files between folders

    • PFS-4586: Check and fix all scripts for CSP violations

    • Release Date: September 2025

    • Build Number: 23.3.100

    • Type: Service Pack Release

    📜 Full Changelog

    • PFS-4481 - N1.2 Activate Content Security Policy (CSP) by default

    • PFS-4586 - Check and fix all scripts for CSP violations

    • PFS-4564 - Fix CSP violations in ONLYOFFICE

    • PFS-4570 - Update HARICA root certificate in JVM

    • PFS-4597 - Fix long mount periods on login due to constant version/archive size re-calculation

    • PFS-4579 - Fix webdav connection using token, especially Zotero

    • PFS-4598 - Prevent FileRequestor Timeouts

    • PFS-4571 - Prevent special characters e.g \ in file names

    • PFS-4599 - Optimize storage usage calculation and store to database

    • PFS-4544 - List current websession when not checked "keep me logged in"

    • PFS-4583 - Fix duplicate list loading entries

    • PFS-4560 - Newspage: Show correct author of rename and deletion on shared folder

    • PFS-4589 - Prevent invitations to show up multiple times on list >50 folders

    • PFS-4601 - Add account information when copy file in web

    • PFS-4605 - Web Search: possibility to sort by field

    • PFS-4540 - Reycle bin should not display 0 after purging a single file

    • PFS-4594 - Possiblity to hide first and last name input on registration form

    • PFS-4590 - Recycle bin / Versions: Filename as tooltip for long file names

    • PFS-4608 - Reduce SEVERE logging: Overwriting session account for not actually overwriting

    • PFS-4536 - Search bar cosmetics on phone view

    • PFS-4414 - Fix setting maxDownload=0

    • PFS-4532 - Hide new feature notifications in online document editing

    • PFS-4609 - NPE in WebDAV