Skip to content

v1.62.6

Choose a tag to compare

@github-actions github-actions released this 10 Sep 11:59
· 217 commits to master since this release
2160e73

Fixed

  • More collaboration-layer security hardening from a follow-up external audit:
    • A collaborator whose access was just revoked can no longer land a last write on the shared document by racing the connection close — a frame from a socket the server no longer recognises is dropped.
    • Restoring a version can no longer write document history back into storage moments after the workspace was deleted.
    • A WebSocket that finishes connecting just after the workspace is deleted is now turned away instead of joining a dead room.
    • A "request edit access" note and the requester's name are now sent only to the owner's own session, not broadcast to every connected collaborator.

Full Changelog: v1.62.5...v1.62.6