Skip to content

ValuSafe 4.3.34

Choose a tag to compare

View all tags
@jsteinhaeuser jsteinhaeuser released this 11 Oct 17:04
· 8 commits to main since this release
v4.3.34
857de9e

Security and accessibility release.

Highlights

  • Security: the detail view inserted item names, rooms and notes unfiltered (stored XSS by users with edit rights). Values are now shown as plain text.
  • Two-factor sign-in for all accounts (Settings → Manage two-factor); administrators can reset it in user management.
  • User management no longer puts password hashes or two-factor secrets into the page; the browser can no longer silently set a new password when editing an account.
  • About 45 browser messages now in all nine languages; the page reports the user's language to screen readers.
  • Overview cards can be opened with the keyboard.
  • QR codes now appear for every text length (bug in the QR library).

Full list: CHANGELOG.md

Updating: upload the files over the existing installation; no database migration.

Assets 3
Loading