Skip to content

v4.10.1

Compare
Choose a tag to compare
@github-actions github-actions released this 04 Mar 07:14
· 328 commits to main since this release
d477972

Code v1.75.1

Security

Added an origin check to web sockets to prevent cross-site hijacking attacks on
users using older or niche browser that do not support SameSite cookies and
attacks across sub-domains that share the same root domain.

The check requires the host header to be set so if you use a reverse proxy
ensure it forwards that information otherwise web sockets will be blocked.