ServiceNow SDK 4.13.x
SDK 4.13.x Patch Notes
++**
ServiceNow released SDK 4.13.x patch changes. The release adds table support for db_object_id in bootstrap and for configuration_access, and adds a protectionPolicy option for sys_security_acl_role. It fixes an OAuth CSRF issue by restoring cookie replay and binding CSRF lookup to the exact session, and it also fixes a now-ux-globals Array.from polyfill requirement and a TypeScript error during UI type-checking.
What changes for platform teams
Platform teams that use the ServiceNow SDK should pick up the OAuth CSRF fix, which is a security fix in the SDK itself. Teams managing ACL rules can use the new protectionPolicy option on sys_security_acl_role, and telemetry events no longer have person profile processing applied.
Changes
- Added table support for db_object_id in bootstrap and for configuration_access.added
- Added a protectionPolicy option for sys_security_acl_role.added
- Fixed an issue requiring an Array.from polyfill in now-ux-globals.fixed
- Fixed an OAuth CSRF issue by restoring cookie replay and binding CSRF lookup to the exact session.fixed
- Bumped isomorphic rollup dependency.other
- Improved telemetry client safety across SDK version boundaries.other
- Build/tooling fix to eliminate a TypeScript error during UI type-checking.other
- Disabled person profile processing on telemetry events for improved privacy.other
Full release notes ↗ · all ServiceNow SDK releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules