Magento 2.3.5 最新版本介紹

根據官方消息Magento （EE）2.3.5 本應該在上週發佈的，但在了4月20這周，才見到2.3.5的特別版出來，只有少部分公司搶先試鮮了。

在之前的官方說明中瞭解到，Magento將在新的版本中有較大的更新。Magento 主架構輕量化、加強 Marketplace 的存在感，將許多不錯的功能將漸漸停止更新更甚至2.4將會被移除，同時鼓勵大家前往 Marketplace 中下載各家提供的最新版本或者插件。這樣的變化對於框架的迭代更新及安全性是更好的，同時也意味着系統需要整合更多第三方插件了。

安全性

此外本次更新修正了超過25個安全性的加強並且更優化了跨站程序(XSS)攻擊的潛在危險。其中使用者比較有感的會是網址列中的 session id 將會被移除，而這個也是一個潛在個安全弱點。

模塊升級

Elasticsearch 支持 7.5 版本。還在使用 Elasticsearch 2.x, 5.x版本的都會被建議停用，而 Magento 2.4.0 時將移除過時版本。

建議停用以下默認付款方式與功能，並且採用各自付款供貨商的官方套件或客製化處理。

1. Worldpay
2. Authorize.net
3. Authorize.net (Direct Post)
4. CyberSource
5. eWay
6. Signifyd fraud protection
7. Google Shopping ads Channel

功能優化

1. 加強客戶資料快取
2. 加強 PWA 的功能
3. 加強倉庫管理工具讓多倉庫多供貨商的模式更加完善
4. B2B 功能的效率加強
5. Page Builder 整合 Yotpo
6. Vertex 加強跨國稅率的應用，加強虛擬商品的稅率機制。

 

Magento 2.3.5 新特性的英文版如下：

What is expected from the latest Magento 2.3.5 Release:

Substantial Security Enhancements

• More than 25 security improvements to address remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities
• Content Security Policy, an HTTP response header that browsers can use to enhance the security of a web page, implemented
• Session ID from URLs removed

Platform Upgrades

• Elasticsearch 7.5 supported
• Deprecation of the integrations of the Authorize.Net, eWay, CyberSource, and Worldpay payment methods. Check here.
• The core feature – Signifyd Fraud Protection Code, not supported anymore.
• Symfony components upgraded
• Migration of dependencies on Zend Framework to the Laminas project

Performance Boosts

• Introducing a new way to invalidate all customer sections data that avoids a known issue with local storage when custom sections.xml invalidations are active
• Redis performance improved

Enhancements in Infrastructure

• The PayPal Pro payment method now no longer requires access to the customer’s session that the default Chrome same-46 site cookie did not permit.
• A PHPStan code analysis check is now integrated into Magento static builds that perform static code analysis to identify additional issues that were not detected by PHP CodeSniffer and PHP Mess Detector till now.

Merchant Tool Enhancements

• Page Builder (For Magento Commerce 2.3.5)
  • Included the templated that can be created from the existing content and applied to the new content areas
  • Video backgrounds can now be used for the rows, banners, and sliders
  • Option to set the height of page builder rows, banners, and sliders to the full height of the page are now included
  • Content type upgrade library
• Inventory Management
  • Bulk API for checkout and cart verification
  • New extension point for SourceDataProvider and StockDataProvider
  • View the allocated inventory sources from the Orders list
• GraphQL
  • Ability to use  products and categoryList queries in order to retrieve information about products and categories that have been added to a staged campaign
• dotdigital
  • Importer performance improved
  • Engagement Cloud and Magento B2B integrated to allow the B2B merchants to leverage their B2B data and engage with the customers in a better way.
• Google Shopping ads Channel is no longer supported.

Apart from these awesome features, the Magento 2.3.5 release also includes improvements in the vendor developed extensions like Klarna, Yotpo, and Vertex.

The awesomeness does not end here!

Magento 2.3.5 is power-packed with enhancements like:

• Enhanced Adobe Stock integration
• Bundle product prices are now calculated correctly on the product pages
• Improvements in the cart, checkout, catalog, CMS content, Javascript framework, payment methods, shipping, UI, and other general fixes.
• The WYSIWYG editor now works as expected on Internet Explorer 11.x, display two or more editors on a catalog product edit page, and it no longer hangs indefinitely when you try to upload an image from the admin.

For Magento Commerce 2.3.5, the improvements in B2B includes:

• “Could not save shared catalog” error solved.
• Ability to configure a downloadable product’s link options from the Admin View Quote page
• Admin can now place a quote order when paying with PayPal, when assigned appropriate permissions.
• Now, the products can be added to cart from Quick Order after a user’s Customer Group is updated
• The products with special characters are now displayed correctly in the Shared Catalogs in the admin

and many more.

Magento 2.3.5 is all set to release this April. The merchants are requested to upgrade the Magento 2 stores to the latest version in order to avail these exciting features, offer a secure online shopping platform and get the competitive edge!