Skip to content

LD Hydez v2.3.1

Choose a tag to compare

View all tags
@lisasdungeon lisasdungeon released this 30 Jul 04:17
v2.3.1
c4bd5fe

LD Hydez v2.3.1

Security and bug-fix release.

  • Fixed unvalidated config import: hidden slot/page/sidebar-tab values, opacity, and animation duration from an imported (or shared) config file were trusted without validation and interpolated directly into a world-scoped dynamically generated stylesheet. A crafted or shared config file could have injected arbitrary CSS into every connected client. Imports now run through the same validators the form's own save path uses.
  • Fixed manifest README/LICENSE links pointing at a nonexistent main branch (repo uses master).
  • Removed an unsupported patreon author field from the manifest.
  • Fixed an off-by-one in the Hotbar Pages panel's "Slots X-Y" hint text.
  • Added 12 missing sidebar-tab translation labels (previously showed raw translation keys).
  • Removed ~30 unused leftover translation keys and a duplicated tab-id list.
  • Fixed the release zip shipping its own dev-only build/validate scripts.
  • Added a 25-test behavioral suite.
Assets 4
Loading