Release v1.2.2
v1.2.2
Changelog
Fixed
- Security (REQ-SEC-005): panel CSRF validation is fail-closed — when
CsrfTokenManagerInterfaceis missing, mutating panel actions (enable/disable/schedule/login/logout) return HTTP 403 instead of skipping CSRF checks.
Compatibility
- Unchanged: PHP
>=8.2,<8.6; Symfony^7.4 || ^8.0. Requiressymfony/security-csrffor panel mutations.
Full Changelog: v1.2.1...v1.2.2