================================
Lasso Professional Server 8.5
Change Notes

Version: 8.5.6
Release: April 27, 2009
================================

- Introduction
- Updated Features and Fixes


--------------------------------
Introduction
--------------------------------

Lasso Professional 8.5.6 is a free update to Lasso Professional 8.5 which is recommended for all users. This update includes an important security update, minor fixes, and documentation updates. Consult the Lasso 8.5 Setup Guide and Lasso 8.5 Language Guide for information about the new features in this version.


--------------------------------
Updated Features and Fixes
--------------------------------

- The search path for LassoApps has been altered.  Lasso will now look for LassoApps in the "Lasso Professional 8" application folder first and then in the Web server root.  This prevents a situation where a site developer could replace a built-in LassoApp with a custom LassoApp.  

For example, the search order on Mac OS X would be as follows:

	/Applications/Lasso Professional 8/LassoSites/[sitefolder]/LassoApps/...
	/Applications/Lasso Professional 8/LassoApps/...
	/Library/WebServer/Documents/...

This change means that a replacement for the built-in LassoApps will no longer be loadable from the Web server root.  Instead, these LassoApps should be placed in the LassoApps folder within the specific site folder.  LassoApps in each site override the LassoApps at the global level.  Site administrators can also lock down LassoApps by placing them in the LassoApps folder for each site.

If you want to build a custom version of a built-in LassoApp and don't have access to the application folder then you will need to use a different name, e.g. MyDatabaseBrowser.LassoApp.

- An issue with [FTP_GetListing] which prevented it from returning more than one entry from some FTP servers has been corrected.

- An issue with [Auth_Custom] has been corrected.  If an -AuthTag is specified, the tag now accepts an -AuthTagParams parameter which is passed through to the designated authorization tag along with the username and realm.

- An error which could cause [Email_MXLookup] to fail has been corrected.  The display of MX records in Site Administration has been corrected.

- Lasso's DNS lookup tags now perform additional validation on the response from the DNS server and use ephemeral port randomization to foil attempts at DNS injection.

- An issue with the -TableEncoding property of an inline -Host specification not setting the encoding for the connection to the data source has been corrected.

- An issue with some 4-byte Unicode characters being read improperly has been corrected.

- Tags written in LJAPI can now return error messages without generating an exception.

================================
Copyright  2009 LassoSoft, LLC. All rights reserved.
