Issues Fixed in 15.9.24

• Fixed a bug in the C++ linker missing imports when using umbrella LIBs with difference casing on postfix of DLL name.
• Fixed a bug in the ARM64 C++ compiler where the wrong values could be restored after setjmp.
• Fixed C++ compiler bug for proper folding of inline variable dynamic initializers.
• Made a change that enables Enterprise IT administrators and deployment engineers to configure tools like Microsoft Update client & SCCM to determine applicability of VS2017 updates hosted on Microsoft Update Catalog & WSUS.

Security Advisory Notices

• Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
• Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
• .NET Core Denial of Service Vulnerability

These are the customer-reported issues addressed in 15.9.9:

• SSDT: We fixed a crash in the SSIS Foreach Loop container.
• A few .NET native for UWP customer issues were fixed in .NET native tools 2.2 (UWP 6.2.4).
• We have corrected dual signing of Visual C++ Redistributable installers.

Security Advisory Notices

• A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files.
• Unity Editor Remote Code Execution Vulnerability.
• .NET Core NuGet Tampering Vulnerability. 

Here’s what’s new in this release:

• Azure Active Directory authentication with Microsoft.Identity.Web
• CSS isolation for Blazor components
• Lazy loading in Blazor WebAssembly
• Updated Blazor WebAssembly globalization support
• New InputRadio Blazor component
• Set UI focus in Blazor apps
• Influencing the HTML head in Blazor apps
• IAsyncDisposable for Blazor components
• Control Blazor component instantiation
• Protected browser storage
• Model binding and validation with C# 9 record types
• Improvements to DynamicRouteValueTransformer 
• Auto refresh with dotnet watch 
• Console Logger Formatter
• JSON Console Logger 

These are the customer-reported issues addressed in this release:
- The debugger cannot continue running the process. Operation not supported. Unknown error: 0x9233000b.
- Recent Projects and Solutions not populated once executed.
- Full build every time with 15.5.
- Wrong IntelliSense errors are still shown on VS 15.5.2 for Visual Basic projects.
- VS2017 15.5.2 Unresolved references when "Allow parallel project initialization" is enabled.
- Upgrading to 15.5.2: cannot launch nor repair VS.
- VS2017 Installation issue.
- Unable to install because of BSoD.

Here’s a summary of what’s new in this preview release:

• Improved ASP.NET Core debugging experience
• Servers & middleware
  • IHttpSysRequestTimingFeature
  • SNI hostname in ITlsHandshakeFeature
  • IExceptionHandler
• Blazor
  • New Blazor Web App project template
  • Blazor router integration with endpoint routing
  • Enable interactivity for individual components with Blazor Server
  • Improved packaging of Webcil files
  • Blazor Content Security Policy (CSP) compatibility
• API authoring
  • Support for generic attributes
• SignalR
  • SignalR seamless reconnect
• Native AOT
  • Support for AsParameters and automatic metadata generation in compile-timed generated minimal APIs
• Authentication and authorization
  • Authentication updates in ASP.NET Core SPA templates
  • New analyzer for recommended AuthorizationBuilder usage
   

mkdir testapp
cd testapp
touch index.js
npm init
npm i express --save

"scripts": {
    "start": "node index"
  }

const express = require('express')
const app = express()

const PORT = 3000;

app.get('/', function (req, res) {
  res.send('Hello World')
})

app.listen(PORT, function () {
  console.log(`listening on port ${PORT}!`)
})

docker run -d -p 3030:3000 -v $(pwd):/var/www -w "/var/www" node npm start

docker ps

docker exec -it 6003 bash

cat index.js

docker stop 6003

docker ps -a

docker rm -v 6003

  <h1>News</h1>
  <div>Welcome to our site!</div>

  <h2>World</h2>

  <h3>Title 1</h3>
  <div>description 1.</div>

  <h2>Science</h2>

  <h3>Title 2</h3>
  <div>description 2.</div>

  var headings = document.querySelectorAll('h2, h3');
  for (var i = 0; i < headings.length; i++) {
    if (headings[i].tagName === 'H2') {
      headings[i].style.color = 'blue';
    }
    else {
      headings[i].style.color = 'green';
    }
  }

<h2 style="color: blue">….</h2>
<h3 style="color: green">….</h3>

  <h2>World</h2>

  ...

  <h2>Science</h2>

 <script>
  var headings = document.querySelectorAll('h2');
  for (var i = 0; i < headings.length; i++) {
    headings[i].style.color = 'blue';
    headings[i].style.fontWeight = 'bold';
  }
 </script>

 headings[i].style['font-weight'] = 'bold';

  var headings = document.querySelectorAll('h2');

  for (var i = 0; i < headings.length; i++) {
    headings[i].style.cssText = 'color: blue; font-weight: bold';
  }

h2 { color: blue; }
h3 { color: green; }

 <link href="styles.css" rel="style sheet">

<style>
  h2 { color: blue; }
  h3 { color: green; }
</style>

var sheet = document.styleSheets[0];
sheet.insertRule('h2 { font-style: italic; }', sheet.cssRules.length - 1);

// hide an element
$element.hide();

// show it again
$element.show();

element.setAttribute('hidden', '');

element.removeAttribute('hidden');

<style>
  .box {
    padding: 10px;
    margin: 5px;
    border: 3px solid;
    display: inline-block;
  }
</style>
<span class="box">a box</span>

 // returns 38
var clientHeight = document.querySelector('.box').clientHeight;

// returns 55
var clientWidth = document.querySelector('.box').clientWidth;

 // returns 44
var offsetHeight = document.querySelector('.box').offsetHeight;

// returns 61
var offsetWidth = document.querySelector('.box').offsetWidth;

Microsoft today released the first stable version of Microsoft Edge. Build 79.0.309.65 can be downloaded from Microsoft's official web site. 

Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthenticated, remote attacker to bypass authentication on vulnerable devices.