Posted on

Sitecore Forms – Bypassing validation and overposting viewmodels

TLDR; Sitecore Forms is vulnerable for overposting which enables end-users to disable field validations. I’ve noticed that Sitecore Forms uses the default ASP.NET MVC model binding, and it binds the posted model to the FieldViewModel. As there is no validation on which properties of the FieldViewModel can be bound, we can post fields that should not …

Continue reading “Sitecore Forms – Bypassing validation and overposting viewmodels”

Posted on

Sitecore SXA/JSS – Invariant language versions and access denied exceptions

Within a new implementation running on Sitecore 10.1 with SXA, we ran into a problem where we saw Invariant Language versions being created on certain items or recieving access denied exceptions, when saving an item. After a long time i’ve managed to reproduce the issue and pinpoint it to a new handler that was introduced …

Continue reading “Sitecore SXA/JSS – Invariant language versions and access denied exceptions”

Posted on

Sitecore CLI – Non-interactive login fails when having requiresUniqueEmail set to true

With the Sitecore CLI you can choose to login in with a non-interactive login, meaning that you specify a ClientId and ClientSecret, which is then used to log in. Interactive login means that you log in using a username and password, for a pre-existing user. Today a user on Slack had some issues using the …

Continue reading “Sitecore CLI – Non-interactive login fails when having requiresUniqueEmail set to true”

Posted on

Sitecore SXA – Sort by title does not work

Please note that my suggested solution isn’t specific for SXA. You can use this without SXA, as it introduces a new computed field. The SXA Sort Results component lets you sort your search results based on the Sortings that you define within /sitecore/content/Your Tenant/Your Site/Data/Search/Sort Results.This functionality will make use of the default Solr sorting, …

Continue reading “Sitecore SXA – Sort by title does not work”

Posted on

Sitecore – Hide the primary language from a multilingual site.

For one of our projects, we have a multilingual site, which contains content in Dutch and in English. To make sure that the language of the site isn’t determined just based on a cookie value, we’ve set LanguageEmbedding to Always on our LinkManager. By default, this will lead to the following:https://www.testdomain.com/nl-NL/mypagehttps://www.testdomain.com/en/mypage Looks great doesn’t it? …

Continue reading “Sitecore – Hide the primary language from a multilingual site.”

Posted on

Sitecore CLI – Auto publish changed items with Sitecore Content Serialization

With Sitecore CLI 3.0 a few new features have popped up, and for me, the most important one for me, is being able to publish changed items automatically when using Sitecore Content Serialization. In CLI 2.0 you had the option to run sitecore publish which would just do a full publish to the WEB database. …

Continue reading “Sitecore CLI – Auto publish changed items with Sitecore Content Serialization”