Skip to content

# Gatey v2.0.5 — Config sanitization hardening

Choose a tag to compare

@scsinfo scsinfo released this 07 Jan 21:42
· 57 commits to master since this release

This release hardens configuration handling by ensuring only AuthenticatorConfig keys can end up in the resolved config/state.

What changed

  • Sanitizes the resolved configuration to AuthenticatorConfig keys only
  • Prevents unknown/extra keys from leaking in from getConfig(...) and/or persisted site.settings
  • Improves stability and forward-compatibility when upstream sources return extended payloads

Notes

No manual action required. Recommended update for all users.