Skip to content

Horilla CRM v1.12.1 — Security, Localization & Platform Reliability Enhancements

Choose a tag to compare

View all tags
@horilla-opensource horilla-opensource released this 12 Jun 16:17
· 44 commits to master since this release
1.12.1
ae62dd1

Release Date: 12 June 2026
Version: 1.12.1
Status: Security Hardening, Internationalization, Multi-Company Stability & Platform Enhancement Release

Horilla CRM v1.12.1

Horilla CRM v1.12.1 focuses on platform stability, security hardening, internationalization, multi-company reliability, and overall user experience improvements.

This release introduces centralized XSS sanitization, CSV/XLSX export protection, expanded localization support across 86 locales, meeting provider enhancements, booking architecture improvements, mail configuration management, reporting enhancements, and numerous fixes for company-aware integrations throughout the platform.

The result is a more secure, globally accessible, and enterprise-ready platform with improved maintainability and consistency across all modules.

This release focuses on:

🔒 Security Hardening & XSS Protection
🌍 Internationalization & Localization Expansion
🏢 Multi-Company Stability Improvements
📅 Calendar, Meeting & Booking Enhancements
📧 Mail & Notification Improvements
📊 Reporting & Analytics Improvements
⚡ UI/UX Enhancements & Performance Fixes
📚 Documentation & Platform Standardization

The result is a more secure, reliable, and globally-ready CRM platform.

Highlights

🔒 Security Hardening

CSV/XLSX Export Protection

  • Prevent formula injection attacks during CSV and XLSX exports
  • Improve exported file safety across spreadsheet applications

Centralized XSS Protection

Introduced shared sanitization infrastructure:

  • Added centralized sanitize_html() helper
  • Added centralized sanitize_plain_text() helper
  • Added bleach-based HTML sanitization with CSS allow-listing
  • Integrated DOMPurify sanitization within Summernote editors

Mail & Notification Security

  • Sanitize Mail template subjects and bodies
  • Sanitize Notification template titles and messages
  • Improve validation handling for rejected content
  • Ensure safe rendering in previews and detail views

User Privacy Improvements

  • Restrict login history visibility to the current user
  • Prevent unintended exposure of authentication history records

🌍 Internationalization & Localization

Platform-Wide Translation Expansion

Internationalization coverage has been significantly expanded:

  • Added translation support across templates, Python modules, forms, and JavaScript
  • Internationalized user-facing text throughout CRM workflows
  • Added translation support for booking, mail, filters, leads, login flows, import/export, and shared components

Translation Infrastructure

  • Refreshed django.po translation catalogs across 12 modules
  • Updated translation resources across 86 supported locales
  • Added new locale resources for generics framework components

Activity Localization Updates

  • Refreshed activity translations for new meeting provider labels
  • Updated activity status and meeting-related localization strings

🏢 Multi-Company Reliability Improvements

Company-Aware Settings Resolution

Improved company isolation and configuration handling across:

  • Google Calendar integrations
  • Meeting integrations
  • Opportunity settings
  • Team selling configuration
  • Shortcut key management

Graceful Missing Company Handling

  • Prevent failures when active company is unavailable
  • Improve resilience during company switching workflows
  • Ensure consistent settings retrieval using company-aware lookups

Company Synchronization

  • Shortcut keys now remain visible after company changes
  • Improved active company consistency across CRM modules

📅 Meetings, Calendar & Booking

Meeting Provider Enhancements

Added support for multiple meeting providers:

  • Zoom
  • Google Meet
  • Microsoft Teams

Calendar Improvements

  • Improved Google Calendar configuration lookups
  • Fixed company switching issues for calendar integrations
  • Prevent duplicate configuration creation issues

Booking Architecture Improvements

  • Refactored booking views into dedicated modules
  • Improved maintainability and future extensibility
  • Expanded booking documentation

Branding-Aware Meeting Emails

  • Meeting reminders and invitations now use platform branding settings
  • Replaced hardcoded product names with dynamic branding values

📧 Mail & Notification Enhancements

Mail Configuration Management

Added:

  • Mail configuration detail modal
  • Channel-specific edit and delete actions
  • Improved configuration visibility and management

Template Handling Improvements

  • Improved validation workflows
  • Better handling of invalid content submissions
  • Consistent sanitization behavior across mail and notification systems

📊 Reports & Analytics

Pivot Table Improvements

  • Added active cell state highlighting
  • Added filter badges with quick clear actions
  • Improved filtering of empty and null grouped values
  • Enhanced report usability and navigation

⚡ User Experience Improvements

Leads

  • Enhanced Web-to-Lead forms
  • Added improved Select2 integration
  • Improved spacing and hover state consistency
  • Fixed lead conversion success modal navigation

Core UI Improvements

  • Improved role empty-state pages with illustrated layouts
  • Added clearer role creation guidance
  • Improved browser, operating system, and device identification in login history

Generic Components

  • Fixed Select2 edit-mode filtering behavior
  • Fixed navbar search focus issues
  • Improved form rendering consistency across modules

Performance & Stability

  • Added debounce protection for active-tab persistence
  • Reduced concurrent SQLite write lock scenarios
  • Improved HTMX interaction reliability

🏗️ Platform & Architecture

Template Builtins

Registered globally available template libraries:

  • Django static tags
  • Django i18n tags
  • Horilla template tags

Benefits:

  • Cleaner templates
  • Reduced repetitive {% load %} statements
  • Easier template maintenance

Platform Standardization

  • Replaced CRM-specific branding references with platform-neutral terminology
  • Updated extension examples and documentation
  • Improved branding consistency across emails and documentation

📚 Documentation

Expanded documentation for:

  • Booking view architecture
  • Template builtins
  • Branding-aware email rendering
  • Extension framework examples
  • Platform-neutral development practices
  • Translation infrastructure

🛠️ Major Fixes

Security

  • Fixed CSV/XLSX formula injection vulnerabilities
  • Fixed XSS vulnerabilities in mail and notification templates

CRM

  • Fixed lead conversion navigation
  • Fixed opportunity company-resolution issues
  • Fixed team-selling configuration access

Calendar & Meetings

  • Fixed company switching integration issues
  • Fixed Google Calendar configuration resolution
  • Fixed meeting integration lookup failures

UI

  • Fixed navbar search focus loss
  • Fixed Select2 edit-mode filtering
  • Fixed company selector visibility in user forms

Core

  • Fixed login history privacy issue
  • Fixed shortcut key visibility across company changes
  • Fixed active-tab write-lock scenarios

📜 Changelog Summary

v1.12.1 (12 June 2026)

Added

  • Zoom meeting provider support
  • Microsoft Teams meeting provider support
  • Mail configuration detail modal
  • Centralized sanitization helpers

Improved

  • Internationalization coverage across 86 locales
  • Multi-company configuration handling
  • Booking architecture
  • Reporting experience
  • Login history device information
  • Platform branding consistency

Fixed

  • CSV/XLSX formula injection vulnerabilities
  • XSS vulnerabilities in mail and notification templates
  • Lead conversion navigation issues
  • Google Calendar company resolution issues
  • Opportunity settings lookup failures
  • Login history privacy concerns
  • Select2 filtering issues
  • Navbar search focus problems
  • SQLite write lock conflicts

🎯 Impact

Horilla CRM v1.12.1 strengthens the platform's security, scalability, and global readiness.

This release:

  • Improves protection against common web and spreadsheet-based attacks
  • Expands localization support across 86 languages
  • Enhances multi-company reliability
  • Improves calendar, meeting, and booking workflows
  • Simplifies administration and mail management
  • Increases platform consistency through branding and documentation improvements
  • Provides a more stable and maintainable foundation for future releases

Overall

v1.12.1 is a stability, security, and internationalization-focused release that significantly improves platform reliability while expanding global language support, strengthening multi-company behavior, enhancing integrations, and refining the overall user experience. 🚀

Assets 2
Loading