Skip to content

v3.6.1

Latest

Choose a tag to compare

@electerious electerious released this 18 Sep 15:31

Changed

  • Action values can now be omitted or set to null when creating actions, matching the existing support for resetting values on update
  • HTTP responses now include security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, etc.) via helmet
  • The Time-Zone request header is now validated before use; invalid values fall back to the server timezone silently
  • Free-text fields in the database (source, deviceName, deviceManufacturer, osName, osVersion, browserName, browserVersion, title, key, details) now enforce maximum length limits to prevent storage abuse