Skip to content

8.27.0

Latest

Choose a tag to compare

@riderx riderx released this 28 Oct 19:22
Immutable release. Only release title and notes can be modified.

🆕 Changelog

Security

  • Added trusted-origin enforcement for openWebView JavaScript bridges. Only web content served from configured trusted origins can now invoke native bridges, which helps prevent malicious pages from accessing app capabilities.
    • Breaking change / Migration: If your app relies on JavaScript bridges from non-trusted origins, you must add those origins to your trusted-origins configuration. Bridges are no longer injected for untrusted origins.

Changed

  • Updated @capacitor/camera to 8.2.6 for the latest bug fixes and improvements.
  • Updated build tooling to Bun 1.4.4.

🔗 Full Changelog: 8.26.2...8.27.0