May 2025
The Continuous Compliance 2025.3.0.0 release adds support for metadata management with the CData Salesforce driver, multi-column algorithms for XML file masking, and JSON/JSONB masking in PostgreSQL. It also introduces password vault support for file connectors, improves performance for fixed-width and delimited file masking, and addresses several bug fixes and known issues.
New features
Metadata component management support for CDATA Salesforce driver
This release introduces metadata management support before and after running masking jobs within the Continuous Compliance Engine for the CData Salesforce JDBC Driver. A new driver support plugin has been created to orchestrate this functionality. Integrated with the Rehearsal Tool (DXRT), the plugin allows execution of driver support tasks such as disabling and enabling Salesforce metadata components. For more information, see CData Salesforce driver support plugin topic.
Support for multi-column algorithms in XML file masking
XML file masking now uses Apache Hop with a streaming parser, enabling multi-column algorithm support across XML fields. This update significantly boosts performance, with speeds ranging from 5 to 12 times faster than previous versions. XML files exceeding 100GB can now be handled without encountering memory issues. Additionally, complex XML structures containing over 1,400 XPaths—many of which have masking algorithms applied—can now be efficiently processed and masked.
Support for JSON and JSONB masking in PostgreSQL database
This release adds support for masking JSON and JSONB data types in PostgreSQL database using Document Store Type Masking. For more information, see Managing inventories topic.
Metering support for SQL server
This release adds metering support for SQL Server as a data source. For more information, see Preparing SQL server database for profiling and masking topic.
Password vault support for file connectors
This release adds password vault authentication support for delimited, fixed width, XML, JSON, parquet, and mainframe datasets.
Migration of fixed-width, delimited, and mainframe file masking job processing to Apache HOP library
This release migrates masking job processing for fixed-width, delimited, and mainframe files from Pentaho Kettle to the Apache Hop library. In certain scenarios the migration delivers significant performance improvements - approximately 100% for fixed-width, 50% for delimited, 15% for JSON and 20% for mainframe file masking.
Fixed issues
Release 2025.3.0.0
| Bug number | Description |
|---|---|
| DLPX-49065 | Fixed an issue where self-closing tags in XML files were incorrectly converted to empty tags during masking, even when the fields were not masked. |
| DLPX-76805 |
Delimited File masking now handles mixed EOR (End-Of-Record) enabling delimited files to contain embedded data formats (such as XML). Incorrect EOR configuration can result in a defective masking operation and could cause PII leak. Always ensure EOR matches the masked file.
|
| DLPX-84394 | Fixed incorrect handling of certain XML tags during XML file masking in OTF job |
| DLPX-84969 | Fixed an issue where the character sequence $[xxx] was not being preserved unaltered during XML OTF file masking. |
| DLPX-90493 | Fixed an issue where the same job could be triggered multiple times simultaneously via API. |
| DLPX-91553 | Fixed an error in Fixed Width masking when masking the qualifier field (previously worked for Delimited and Mainframe). |
| DLPX-93732 | Addressed a limitation in FixedWidth file masking where a maximum of 64 masking algorithms could be applied. |
| DLPX-93767 | Fixed an issue where profiling would fail for SQL Server when table or schema names contained the "[" character. |
| DLPX-93789 | Fixed an issue where masking jobs would fail when processing NaN values and UUID fields in PostgreSQL databases. |
| DLPX-93934 | Fixed an intermittent SFTP connection issue from an inability to properly read OpenSSH private keys |
| DLPX-94237 | Fixed an issue where the masking job fails when the ingested parquet file has 'Decimal' or 'Timestamp' data type columns. |
Release 2025.3.0.1
| Bug number | Description |
|---|---|
| DLPX-94269 | Fixed an issue with sync import by accommodating legacy profiler set IDs in the latest masking engine, ensuring compatibility even when the legacy profiler has been removed. |
| DLPX-94346 | Removed explicit locking to avoid deadlocks; batch ID is now retrieved through SQL queries for enhanced reliability. |
Known issues
|
Key |
Summary |
Workaround |
|---|---|---|
|
DLPX- 80640 |
The Masking Drop Indexes task does not detect or drop indexes on SQL Server partitioned tables (OTF and IP). |
Manually Script the Drop and Recreate Indexes. |
| DLPX-81694 | When masking two columns with the same name (but with mixed case), it can cause the same algorithm to be applied. | None |
| DLPX-93701 | On The Fly (OTF) masking job fails when using different source and target connector types (Cloud and On-premise) for JSON, XML, and Parquet files. | None |
| DLPX-96175 | Inconsistent values in parquet masked file for null-heavy, dictionary encoded columns. | None |