Release notes
7.0.1.0
Major release with an optimized analysis engine. Update the rules used in Powershell to match of Audit & Review Client. Added notifications on License Expiry and further improvements to the rule list of SharePoint Framework (SPFx).
New Features
- Change the default installation directory to %localappdata%\Rencore\SPCAF and change the default user directory to %UserProfile%\Documents\Rencore\SPCAF.
- Powershell Version now contains the same number of rules as the Audit & Review Client.
- Added a notification that now indicates the Expiration of Licenses in Audit & Review Client.
- Support is now provided for analyzing resources embedded within assemblies.
- Introduce the facility to perform SPCAF Analysis of SharePoint Framework projects without a build.
- Introduce a new task definition file (gulfile-SPCAF.js) solely for SPCAF without the worry of affecting gulpfile.js.
- Improved SPFx rules.
- Added a refresh button for better handling for offline activation in Audit & Review Client, added Refresh button to allow re-initiating activation after getting online again.
- SharePoint Framework rules IDs have now changed.
- SPCAF now comes shipped with a specific ruleset for SharePoint Framework.
- Refactored SPFx rules to support the SharePoint Framework GA release.
- Highly improved analysis engine: Doubled analysis speed with halved memory consumption.
- Analysis of SharePoint Framework projects (SPFx).
Bug Fixes
- SPC019904: Fixed an issue that could cause different results per scan.
- SPC019013: Fixed an issue causing a false positive within context.
New Rules for SharePoint Framework (SPFx)
Security
- SPF020702: WebPart doesn’t reference scripts from unapproved location.
- SPF020802: WebPart properties should be escaped.
Best Practice
Performance
- SPF120501: Don’t bundle external libraries into your WebPart.
- SPF120901: CDN hosting external scripts has far future expiry configured.
- SPF120902: Bundle is served gzipped.
Metrics
- SPF911201: Client-side component code size.