Skip to content

Ratesight 3.14.0

Choose a tag to compare

@davidbenlaw davidbenlaw released this 28 Sep 03:54
Immutable release. Only release title and notes can be modified.
b2c12d2

Security: protected REST routes reject requests with an invalid signature, and requests with none, in every authentication mode. One compatibility exception in legacy and observe_v2: an unsigned create-page can only create a new draft (never publish, never update an existing post), limited to 30 per site per 24 hours and audited. Auth audit rows record the connecting address. The runtime 404 fuzzy router is off unless a site explicitly stored a mode, and capabilities report the effective mode. Managed rollout: internal, canary, fleet.