Skip to content

Ghostwriter 7.1.2

Choose a tag to compare

View all tags
@chrismaddalena chrismaddalena released this 25 Jun 00:59
· 373 commits to master since this release
v7.1.2
7ceb558
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

This release further locks down client-associated report templates based on user feedback. It also includes a small bug fix to improve compatibility with older browsers.

CHANGELOG

[7.1.2] - 24 June 2026

Fixed

  • Fixed datetime-local rendering for white card and deconfliction edit forms so saved timestamps display reliably in older browsers (Closes #917)

Security

  • Fixed additional client-scoped report template authorization bypasses in template swapping, report generation, archive generation, linting, and lint result endpoints
    • Report template selection now only accepts global templates or templates scoped to the report project's client
    • This fix includes two temporary breaking changes for the API while we work on a custom endpoint to handle this new business logic:
      • Breaking: The GraphQL API no longer allows user or manager roles to set report template ID columns directly when creating or updating reports
      • Breaking: The GraphQL API no longer allows user or manager roles to update a report's project ID column directly
Assets 3
Loading