v3.3.1
TL;DR
🔒 This is a security release!
Fixes the following vulnerabilities:
- Unauthenticated IDOR leaks order token and customer PII
- Payment status forgery via the payment webhook
Details
- Return default options when country code is null in payment methods resolver by @Wojdylak in #349
- Validate webhook payment against order and fix IDOR order token/PII leak by @TheMilek in #352
- Validate webhook payment against order and fix IDOR order token/PII leak by @TheMilek in #354
- [UPMERGE] 3.2 -> 3.3 by @SyliusBot in #353
Full Changelog: v3.3.0...v3.3.1