Skip to content

8.3.0

Latest

Choose a tag to compare

@jeromegamez jeromegamez released this 17 Jul 22:35
Immutable release. Only release title and notes can be modified.
8.3.0
c735027

Security improvements

  • Restricted Realtime Database URLs to Firebase-owned hosts and reject non-root URLs with embedded paths, query strings, or fragments while preserving emulator support. Related OWASP Top 10:2025 entry: A02 Security Misconfiguration.
  • Updated dependency mtdowling/jmespath.php to 2.9.2 to address CVE-2026-54133