FormsViewer

The browser runtime in Qdabra Forms. Run your InfoPath forms, save the data, and connect them into multi-step workflows. Extend with the DBXL add-on for SQL and email.

What FormsViewer Can Do

Run, save, automate.

Save to SharePoint

Built-in

Submit forms to SharePoint libraries or lists. Map form fields to list columns — automatically.

Library and List submit
Field-to-column mapping

qRules — the rule engine

Built-in

80+ commands for date math, data manipulation, SharePoint queries, PDF rendering, and more.

80+ built-in commands
Custom commands via JS API

+ DBXL

Beyond SharePoint: SQL & email

Add-on

Send and receive data with SQL Server databases. Trigger email notifications on form events.

Send to SQL Server
Receive from SQL Server
Mail notifications

Beyond a single form: multi-step workflows

Built-in

Connect forms into processes. Central Flows routes the next step to the right person — by email — and waits for input.

Approval routing
Multi-step intake / sequential review
Conditional branching

Release History

Latest release

2026-10-26

FormsViewer 11.17

PDF rendering: to mitigate a vulnerability in the PDF renderer's Brotli font decompression library (CVE-2026-111497), PDFs no longer load web fonts (including WOFF2), linked stylesheets and SVG images - text falls back to a standard font; JavaScript in form content no longer runs; stricter checks on image, CSS and attachment resources; new limits on view output size and render time, reported as "Render failed" errors instead of an oversized PDF or a hang
Query restrictions: SharePoint _api requests are denied if a path segment is . or .. (literal or encoded), the path contains a backslash, or slashes and quotes are percent-encoded outside quoted literals; applies to single and $batch requests
Data connections: with local-web protection enabled, outbound connections use a validated IP address so DNS changes cannot redirect them to internal services
Cross-site request forgery: FormsViewer now checks which site a data-changing request comes from
On-premises: on-premises SharePoint hosts must now be listed in the new trustedOrigins attribute of <sharePoint>; administrators can approve linked-image paths for PDFs, change the PDF limits, and disable the root page - see the upgrade notes
The unused /Send/EmailPDF, /Send/SendPDF and /Send/HtmlToPDF endpoints are removed; error pages no longer show the Home, About and Contact links

See full Qdabra Forms release history ›

Ready to move forward?

FormsViewer is part of Qdabra Forms.

See pricing, plans, and start your migration on the Qdabra Forms page.

Go to Qdabra Forms ›