Mehul Harry's DevExpress Blog

This Blog

News


Mehul Harry is the DevExpress Web Program Manager. Follow him on twitter: @Mehulharry

Subscribe (RSS, Email)

Archives

February 2018 - Posts

  • IE 9/10 (And Old Android Browsers) Support Ending in DevExtreme - v18.1

    In the next major release of DevExpress (v18.1), we are dropping support for Internet Explorer (IE) 9 and 10 in DevExtreme and dependent products. The following subset of products will be affected:

    • DevExtreme
    • XAF Web & Mobile
    • The following ASP.NET controls and their MVC extensions (these controls are built with DevExtreme):
      • ASPxQueryBuilder
      • ASPxWebDocumentViewer
      • ASPxReportDesigner
      • ASPxDashboard
      • ASPxDashboardViewer

    We actually wanted to drop support in 2017 but we know that there is a small subset of our customers who are still using and still need IE 9/10. This is also why we've been prolonging our support for IE9/10 in other ASP.NET controls for a while

    In a few months when v18.1 is released, DevExtreme controls (client-side and MVC) will no longer support IE 9/10. I recommend upgrading to the latest versions of IE, however, Microsoft recommends that you switch to Microsoft Edge. Of course, there's plenty of other great browers available like Chrome, FireFox, etc.

    Microsoft no longer supports IE9 and IE10

    Microsoft has stopped supporting IE9 and IE10 since January 12, 2016. It officially claims that:

    Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical supports and security updates. Internet Explorer 11 is the last version of Internet Explorer, and will continue to receive security updates, compatibility fixes, and technical support on Windows 7, Windows 8.1, and Windows 10.

    According to the world-wide browser usage statistics the IE versions older that 11 share just about 0.1% of users.

    Modern Browsers, ftw!

    However, it's now time to move on. For us at DevExpress, it's a costly proposition to support older browsers. There's the need for compatibility testing, for patching older versions for our support, but there are two overriding concerns:

    • Because these older browsers are no longer updated, there is a great risk of security breaches for you, your users, and your organization.
    • We cannot take advantage of modern web technologies (and approaches). That means we cannot deliver the best possible performance, user, and developer experience with DevExpress products. This is especially so for modern client-side JavaScript applications that need modern browser features.

    In short, that's why we've made the decision to remove explicit support for IE9 and IE10 in the set of products mentioned above and we strongly encourage you to do the same, if you have not already done so.

    Old Built-in Android Browsers

    An excellent feature that we want to utilize for DevExtreme is CSS Flexbox Layout. Unfortunately, it is not supported in the old built-in Android browsers (up to Android 4.3.x). Therefore, will stop supporting old Android browsers in v18.1 as well. Be aware, this might affect those who are developing hybrid mobile apps for Android.

    Feedback

    I would love to hear your feedback on this decision.

    Will this affect you?

    Drop me a line below or email me.

    Thanks!


    Email: mharry@devexpress.com

    Twitter: @mehulharry

  • Upgrade to jQuery v3.x - DevExpress Controls

    On January 18th, 2018, two moderate security vulnerabilities in jQuery were discovered (CVE-2016-10707, CVE-2015-9251):

    These vulnerabilities are specific for jQuery versions older than v3.x and we consider them to be relatively low in severity because:

    • CVE-2016-10707 - does not affect jQuery v1.x/2.x nor jQuery v3.x. It’s a transient issue which existed in a specific pre-release build

    • CVE-2015-9251 - While this vulnerability could “expose your site to XSS attacks”, the pre-conditions to this are not common. The app must connect to 3rd party hosts and those hosts need to be hacked/misconfigured

    However, if you've not upgraded to jQuery v3.x yet, we encourage you to for two main reasons:

    1. jQuery v1.x and v2.x are officially at end-of-life
    2. To patch your website of these recent vulnerabilities

    In this post, I'll discuss which DevExpress controls use jQuery, how to update them, and our future plans.

    DevExpress Plans

    The DevExpress ASP.NET (WebForms, MVC, and Bootstrap) controls use jQuery v1.1.x. (We embed jQuery libraries delivered in our assemblies only if Embedding Third-Party Libraries is enabled).

    Prior to v17.2, jQuery was obligatory for DevExtreme projects. Since v17.2, it's optional but still widely used by lots of DevExtreme users.

    We plan to update to jQuery v3.x for past minor releases and upcoming major releases. Switching to a different jQuery version could lead to a breaking change so we are performing serveral tests before we update to jQuery v3.x.

    The DevExtreme MVC controls will be upgraded to use jQuery v3.x in the following releases: v17.1.10, v17.2.6 (coming soon), and the next major release v18.1.

    The DevExpress ASP.NET MVC controls' project templates will be upgraded to jQuery v3.x in the upcoming v17.1.10 and v17.2.6 minor releases. Then, in the v18.1 major release, we'll update all ASP.NET controls (WebForms, MVC, and Bootstrap) to use/reference jQuery v3.x.

    However, we recognize that many developers use jQuery independently from our controls and to you, I would recommend upgrading jQuery too (with proper testing).

    Upgrade jQuery

    The v17.2.6 minor release will be available in a couple of weeks and I recommend that you install that for the easiest way to upgrade to jQuery v3.x.

    You can upgrade your website that uses the DevExpress ASP.NET controls, DevExtreme MVC Controls, or DevExtreme client-side controls today because they both support jQuery v3.x.

    The jQuery team has provided an excellent upgrade guide:

    https://jquery.com/upgrade-guide/3.0/

    Because there have been major changes in jQuery from v1.9/2.0 to 3.x, they've created a helpful jQuery Migrate Plugin:

    For my own sites and blogs, I’ve used jQuery Migrate to identify problem areas (and they were few and far between, generally to do with methods that had been deprecated). jQuery Migrate does two things: it logs problems to the console (so you can see what needs changing), and it also adds back the deprecated stuff. In other words, the JS on one’s site still works and you get an indication of what to change in order to upgrade. - Julian Bucknall, DevExpress CTO

    Note: For the client-side DevExtreme controls, you can also upgrade to jQuery v3.x or you can change the underlying client-side framework. However, this is a costly suggestion and one that you're not likely to do unless you're starting a new project. In which case, consider using Angular or React (which do not rely on jQuery).

    If you run in to any issues then please contact our support team and they can help you.

    Thanks!


    Email: mharry@devexpress.com

    Twitter: @mehulharry

LIVE CHAT

Chat is one of the many ways you can contact members of the DevExpress Team.
We are available Monday-Friday between 7:30am and 4:30pm Pacific Time.

If you need additional product information, write to us at info@devexpress.com or call us at +1 (818) 844-3383

FOLLOW US

DevExpress engineers feature-complete Presentation Controls, IDE Productivity Tools, Business Application Frameworks, and Reporting Systems for Visual Studio, Delphi, HTML5 or iOS & Android development. Whether using WPF, ASP.NET, WinForms, HTML5 or Windows 10, DevExpress tools help you build and deliver your best in the shortest time possible.

Copyright © 1998-2018 Developer Express Inc.
All trademarks or registered trademarks are property of their respective owners