Features

Store locator UI improvements

For better clarity and user experience, the following visual and UI updates were made to the public store locator on desktop and mobile:

• Updated tags and types for stores

• New legends for unselected stores, selected stores, and promoted stores

• Navigation for viewing product images

• New layout for viewing product summaries

• Updated legends for product stock status

Options for managing missing stores for CSV import

On the Upload a CSV page for stores (Stores > Import Stores), you can now manage existing stores in BFG that aren’t included in your CSV import file by selecting the following options:

• Keep Existing Stores: Keeps the stores missing from the current import file in the BFG system

• Hide Missing Stores: Hides the stores not in the import file from your public store locator

• Delete Missing Stores: Deletes the stores in the BFG system that are missing from the current import file.

Enhancements

Store Locator security enhancements

To address security vulnerabilities related to the use of iframes in the Store Locator, the following improvements were made:

• The iframe embedding the Store Locator is now sandboxed to restrict potentially unsafe behavior.

• HTML sanitization is now used to remove <script> tags and ensure only safe, valid HTML is accepted.

These updates strengthen protection against cross-site scripting (XSS) and improve overall security while maintaining functionality.

Support for terms and conditions URLs in the Match Columns section

In the Match Columns section on the Match CSV Columns page (Stores > Import Stores), the following columns are now available for signed terms and conditions:

• BFG TERMS FILE URL

• BRAND TERMS FILE URL

This lets you include URLs of your signed terms and conditions as part of the CSV import process.

Viewable permissions on the Create API Key page

On the Create API Key page, only the groups and permissions configured in your API key are now visible.

Resolved issues

• Fixed an issue where clicking Cancel on the Create Attribute page during store creation redirected you to the All Custom Attributes page instead of the Create a New Store page.