Repository navigation
🆕 Changelog
Security
- Added trusted-origin enforcement for
openWebViewJavaScript bridges. Only web content served from configured trusted origins can now invoke native bridges, which helps prevent malicious pages from accessing app capabilities.- Breaking change / Migration: If your app relies on JavaScript bridges from non-trusted origins, you must add those origins to your trusted-origins configuration. Bridges are no longer injected for untrusted origins.
Changed
- Updated
@capacitor/camerato 8.2.6 for the latest bug fixes and improvements. - Updated build tooling to Bun 1.4.4.
🔗 Full Changelog: 8.26.2...8.27.0