Skip to content

Hotfix package#199

Merged
warrendennis merged 86 commits intoopen-osp:mainfrom
openo-beta:hotfix-package
Mar 2, 2026
Merged

Hotfix package#199
warrendennis merged 86 commits intoopen-osp:mainfrom
openo-beta:hotfix-package

Conversation

@lacarmen
Copy link
Copy Markdown
Contributor

@lacarmen lacarmen commented Feb 11, 2026

Summary

This PR contains fixes for bugs that were flagged at MHI, as well as a couple gaps that were identified during OMD Validation.

This branch (hotfix-package) builds on top of PR #188 and includes 14 additional bug fixes and performance improvements that were merged after openo-beta:staging/01232026 was created.

Individual PRs in this package (beyond PR #188)

1. PR #1987 - Fix issue where billings created from a past encounter/appointment had the wrong service date prefilled (3 commits)

  • Fixed missing calendar icon in billing by adding required appointment parameters to track appointments on the eChart
  • Added URL encoding to OscarMsgType and MsgType parameters

Related Issue: #1989

2. PR #2061 - Fix lab E-Chart button opening search for already-linked patients (2 commits)

  • Corrected inverted logic in lab E-Chart button redirect
  • Labs linked to patient now open e-chart directly; unlinked labs show patient search page
  • Added OWASP Encoder for URL parameters and null safety checks

Related Issue: #2059

3. PR #2063 - Fix reversed prevention ordering (2 commits)

  • Updated prevention search ordering to sort by ASC explicitly instead of using default

Related Issue: #2064

4. PR #2101 - Fix: reverse flowsheets prevention order, now descending instead of ascending to match other parts of the flowsheet, like measurements (1 commit)

Related Issue: #2065

5. PR #2110 - Fix: Slow tickler load times (8 commits)

  • Added database indexes for tickler table to improve performance
  • Implemented batch loading for tickler models
  • Added composite index with IF NOT EXISTS safety

Related Issue: #2106

6. PR #2187 - Fix calculator page 404 errors and add OWASP encoding for security (5 commits)

  • Resolved 404 errors on calculator page links
  • Removed problematic base tag, added JSTL core taglib
  • Implemented OWASP Encode.forUriComponent() for sex/age parameters
  • Converted relative paths to absolute paths using ${ctx}

Related Issue: #2102

7. PR #2219 - Fix: legacy documents and doc types not display correctly (6 commits)

  • Fixed legacy documents and doc types display issues
  • Added module normalization to handle capitalization inconsistencies in database
  • Added null checking and OWASP encoding to document JSP files
  • Improved JavaDoc comments and exception handling

Related Issue: #2218

8. PR #2228 - Fix MCEDT/HCV keystore race condition causing upload failures (6 commits)

  • Resolved MCEDT/HCV keystore race condition by making clientKeystore instance-based
  • Added comprehensive JavaDoc to keystore configuration methods
  • Treats empty/blank keystore paths like null to prevent misconfiguration
  • Added regression tests for keystore configuration isolation

Related Issue: #2227

9. PR #2258 - MCEDT multiple file download security processing error (11 commits)

  • Fixed dynamic encryption action count for MCEDT multiple file downloads
  • Replaced hardcoded dual encryption actions with dynamic loop based on actual encrypted element count
  • Supports downloading any number of files (1, 2, 3+)
  • Added comprehensive unit tests for DynamicWSS4JInInterceptor
  • Added DoS protection and input validation for EncryptedKey counting

Related Issue: #2236

10. PR #2257 - Performance: DTO Projection Tickler on read operations (11 commits)

  • Major performance improvement using DTO projection for tickler DAO objects
  • Fixes N+1 query issues in tickler list
  • Refactored ticklerMain to use DTO-only path
  • Added comprehensive tests

Related Issue: #2106

11. PR #2266 - Fix: consultation sorting issues, updated XSS security on consultation page (5 commits)

  • Fixed consultation request sorting and pagination issues
  • Added missing hidden input values (workingTeam, orderBy, desc) to maintain state across pages
  • Added comprehensive OWASP encoding throughout ViewConsultationRequests.jsp

Related Issue: #2260

12. PR #2275 - Fix: missing textbox to edit signature in preferences when no signature is set on the currently logged in provider (2 commits)

  • Fixed missing textbox to edit signature in preferences when no signature is set on the currently logged in provider
  • Added label to fmt messages for editing signatures

Related Issue: #2272

13. PR #2271 - MDS lab tests with leading dashes not displaying in labDisplay.jsp (4 commits)

  • Normalized MDS lab test codes with leading dashes (e.g., '-HBAIC')
  • Stripped leading dashes during HL7 generation to ensure consistent matching between ZMN and OBX segments
  • Aligned ZMN code extraction with MDSHandler parser logic

Related Issues: #2269, #2270

14. PR #2276 - Fix: preventions not being included in flowsheet printing (3 commits)

  • Fixed preventions not being included in flowsheet printing
  • Added fallback logic for missing printstyle dropdown option
  • Added explicit null check and JSP comment block

Related Issue: #2274


Summary Statistics:

  • Total unique commits: 69
  • Total branches merged: 14

LiamStanziani and others added 30 commits January 24, 2026 10:09
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Fixes the SearchPatient2Action to match pre-migration behavior:
 - Labs linked to patient now open e-chart directly
 - Unlinked labs show patient search page
 - Added OWASP Encoder for URL parameters
 - Added comprehensive JavaDoc documentation
- Move request/response initialization inside execute() method
- Add null safety checks for required parameters (labNo, labType)
…scending to match other parts of the flowsheet, like measurements
- Remove problematic base tag that pointed to wrong directory
- Add JSTL core taglib and use EL expressions throughout
- Implement OWASP Encode.forUriComponent() for sex/age parameters
- Convert all relative calculator paths to absolute paths using ${ctx}
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
- Change from Encode.forUriComponent() to Encode.forJavaScriptAttribute()
  for sex/age parameters used in JavaScript onclick attributes
- Fix CSS path from /encounterStyles.css to correct location at
  /oscarEncounter/encounterStyles.css

Co-authored-by: Deval Italiya <D3V41@users.noreply.github.com>
…c to ensure any conditionals, or queries with the expected module issue field will be allowed
…null check to module SQL utility function, added null safety to demographic checks in document jsp files
…is null, normalized modules if the values is uppercase
…nal logic to check for null moduleid before checking potential null value
…or module, added updated javadoc comment about new method thorwing error if module is null
…e are any more data inconsistencies they work with it as well
…re instance-based

The static `clientKeystore` variable in EdtClientBuilder was shared between  MCEDT and HCV services, causing a race condition where HCV validation would overwrite the MCEDT keystore path. This resulted in MCEDT upload failures  after HCV validation operations.
Enhance JavaDoc documentation for setClientKeystoreFilename and
setExternalClientKeystoreFilename methods to comply with CLAUDE.md
standards. Added detailed descriptions, @param tags with specific
data types, and @SInCE tags based on git history.

- EdtClientBuilder.setClientKeystoreFilename: Added context about
  instance-based keystore paths preventing race conditions
- DelegateFactory/OnlineHCValidator/EDTBaseTest: Converted C-style
  comments to proper JavaDoc with comprehensive parameter documentation

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Per CLAUDE.md documentation standards, @SInCE tags must use accurate dates
from git history. Updated all keystore configuration method JavaDoc to reflect
the actual commit date of these changes.

Co-authored-by: Deval Italiya <D3V41@users.noreply.github.com>
LiamStanziani and others added 19 commits February 9, 2026 16:27
…ing fallback logic for no printstyle dropdown option, which is the current behaviour of preventions
@@ -0,0 +1,373 @@
/**
* Copyright (c) 2026. Magenta Health. All Rights Reserved.
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove these, copyright headings.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Resolved in commit e8b02fd

@lacarmen
Copy link
Copy Markdown
Contributor Author

We will get this up to date with main

@lacarmen
Copy link
Copy Markdown
Contributor Author

@warrendennis the copyright headings have been removed and this branch has been made up to date with
main. Please let me know if there's anything else we need to do prior to merging this branch.

@warrendennis warrendennis merged commit 2404b65 into open-osp:main Mar 2, 2026
11 checks passed
@lacarmen lacarmen deleted the hotfix-package branch March 5, 2026 18:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants