What’s New in Magento 2.3.4?
Highlights
Look for the following highlights in this release:
Substantial security enhancements
This release includes the following security enhancements:
Over 30 security enhancements that help close cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities
No confirmed attacks related to these issues have occurred to date. However, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. Most of these issues require that an attacker first obtains access to the Admin. As a result, we remind you to take all necessary steps to protect your Admin, including but not limited to these efforts: IP whitelisting, two-factor authentication, use of a VPN, the use of a unique location rather than /admin
, and good password hygiene. See Adobe Security Bulletin for a discussion of these fixed issues. All known exploitable security issues fixed in this release (2.3.4) have been ported to 2.2.11, 1.14.4.4, and 1.9.4.4, as appropriate.
Security enhancements and fixes to core code
Additional security enhancements include:
- Removal of custom layout updates and the deprecation of layout updates to remove the opportunity for Remote Code Execution (RCE). The Custom Layout Update field on the CMS Page Edit, Category Edit, and Product Edit pages has now been converted to a selector. You can no longer specify an entity-specific layout update with text but instead must create a physical file that contains the layout updates and select it for use.
- Redesigned content template features so that only whitelisted variables can be added to templates. This avoids the situation where administrator-defined templates such as email, newsletters, and CMS content can include variables and directives that can directly call PHP functions on objects.
Platform upgrades
The following platform upgrades help enhance website security and PCI compliance.
- Enhancements to the message queue framework. Magento now supports the latest release of RabbitMQ v3.8, which is the third-party technology that underlies the Magento message queue framework.
- Improved page caching and session storage. This release has been tested on the latest stable release of Redis v5.0.6.
- Enhanced support for MariaDB 10.2. Before Magento 2.3.4, when using declarative schema with MariaDB 10.2, Magento threw an error indicating that the schema was not up-to-date after running
bin/magento setup:upgrade
. With this release, we have normalized the values returned by MariaDB, which allows system integrators to use declarative schema with both MySQL and MariaDB. - The core integration of the Authorize.net payment method has been deprecated. Please use the official payment integration that is available on Marketplace.
Note: Magento 2.3.4 has not been tested with PHP 7.1. PHP 7.1 reached EOL (End of Life) on December 1, 2019. We recommend updating your deployment to a supported version of PHP.
Performance boosts
Merchants and customers will see performance improvements as a result of these enhancements:
- Redundant non-cached requests to the server on catalog pages have been eliminated by refactoring the customer section invalidation mechanism and improving banner cache logic.
- PHTML files have been refactored to better support parsing by the bundling mechanism. Our new bundling mechanism now identifies all dependencies on JavaScript.
- Added the ability to disable statistic collecting for Reports module by default. A new configuration setting (System Configuration > General > Reports > General Options) allows merchants to completely or partially disable Magento Reports. (Statistics collection for the Reports module is disabled by default. Magento recommends disabling Reports functionality for performance reasons when this capability is not required.)
Infrastructure improvements
This release contains 250 enhancements to core quality, which improve the quality of the Framework and these modules: catalog, sales, PayPal, Elasticsearch, import, and CMS.
Merchant tool enhancements
- Integration with Adobe Stock image galleries. The new bundled Adobe stock integration extension enables merchants to add high quality media assets to their website content without leaving the Magento Admin. Merchants can use the searchable interface in the Magento Media Gallery to explore, preview, license, and deploy stock images in website content.
Inventory Management
Inventory Management enhancements for this release include:
- Addressed a known performance issue that caused higher than expected loads on the database server in scenarios involving the shopping cart.
- Updated the Inventory Reservations CLI command to reduce memory usage when finding and compensating for missing reservations on large catalogs.
- Resolved multiple quality issues, including those related to credit memos, grouped products, source and stock mass actions.
GraphQL
This release includes improved GraphQL coverage for search, layered navigation, cart functionality. The following mutations/queries are available:
- Guest carts can now be merged with customer carts. The
mergeCarts
mutation transfers the contents of a guest cart into the cart of a logged-in customer. - A customer can start an order on one device and complete it on another. Use the `customerCart query to obtain the cart ID for a logged-in customer.
- Layered navigation can use custom filters. The
filter
attribute of theproducts
query now requires theProductAttributeFilterInput
object. You can specify a pre-defined filter in this object, or define a custom filter. As a result, layered navigation on your website filters on the attributes you need. - You can search categories by ID, name, and/or URL key. The [
categoryList](/guides/v2.3/graphql/queries/category-list.html) query replaces the deprecated
category` query. - The
ProductInterface
supports fixed product taxes (such as WEEE). Use thestoreConfig
query to determine whether to store supports these taxes. - The
cart
object has been enhanced to include information about promotions and applied discounts at the line and cart levels.
PWA Studio
For information on these enhancements plus other improvements.
dotdigital
- Live Chat powered by dotdigital enables merchants to increase conversion rates, and keep customers coming back with real-time engagement. All Magento 2.3.x merchants (both Magento Open Source and Magento Commerce) can receive a free live chat agent without the need for a full dotdigital Engagement Cloud license.
- Engagement Cloud includes a new Chat widget that makes it easy for shoppers to communicate in real time with customers as they shop in your store. Chat can be accessed from the Engagement Cloud section of the Magento configuration, or directly from your Engagement Cloud account.
Google Shopping ads Channel
Google Shopping ads Channel Release Notes describes all changes to this feature for Magento 2.3.x.
Vendor-developed extension enhancements
This release of Magento includes extensions developed by third-party vendors. It includes both quality and UX improvements to these extensions.
Klarna
Klarna Payments has a new Data sharing on load field in the Magento configuration that can be set to share customer data either after the transaction is authorized, or when the Klarna payment method is selected during checkout.
How to Choose Magento 2.3.4 Hosting Provider?
How to choose a best and cheap web host for Magento 2.3.4? Choosing top and reliable web host for Magento 2.3.4 is not a simple task especially with low price offers. You need to take a large number of factors into consideration, including the Magento 2.3.4 compatibility, usability, features, speed, reliability, price, company reputation, etc. Therefore, we have established this Magento 2.3.4 review site, which is designed to help you find the top and reliable Magento 2.3.4 host within minutes, based on our specialized editors’ Magento 2.3.4 hosting experience and real customers’ feedback.
Top and Reliable Magento 2.3.4 Hosting Provider
ASPHostPortal.com
ASPHostPortal’s Magento 2.3.4 hosting packages are proving very popular for 2019. ASPHostPortal.com Magento 2.3.4 optimized hosting infrastructure features independent email, web, database, DNS and control panel servers and lightning fast servers ensuring your site loads super quick! They are 100% fully support on windows platform. Their windows hosting is compatible with the Magento 2.3.4 hosting management and collaboration application.
DiscountService.biz
DiscountService.biz offers several web hosting packages, from the beginner package – an affordable solution that’s more than enough to get a small business up and running – to the professional package which offers large disk space, band width and websites. There are also specialized business packages that put true business savvy within everyone’s reach.
UKWindowsHostASP.NET
UKWindowsHostASP.NET is proudly to be one of Magento hosting service provider compared from our visitors feedback and rating! UKWindowsHostASP.NET delivers affordable Magento hosting technology for as low as £5.50 per month. Not only do they deliver reliable load-balanced cloud architecture, but they guarantee their performance with a 99.9% uptime promise, and a 30 day money back guarantee. UKWindowsHostASP.NET can help its clients to migrate existing websites to their servers for free, and they provide extensive web tools for their clients, including the top-rated Plesk control panel. And that’s not further not enough though. 24/7 server monitoring!