v0.6.2 v1.1.3
BITyia/DroneSplatOct 5, 2026 → Oct 5, 20260 days between releases
What's New
Fixes XSS vulnerability by sanitizing HTML in /api/persistence endpoints.
Breaking Changes
- Slide HTML stored via /api/persistence is stripped of scripts, event handlers, and inline styles, and inline styles are re-serialized without spaces.
Improvements
- Applies consistent HTML sanitization policy to /api/persistence endpoints to match /api/classroom.
Bug Fixes
- Resolves cross-site scripting (XSS) vulnerability in course document storage and retrieval.
Upgrade Notes
Existing documents stored via /api/persistence will be sanitized when read. Ensure your frontend handles the stripped HTML correctly. No configuration changes required, but verify rendering logic.
The Two Releases
v0.6.2
Oct 5, 2026· 17 days ago
This release focuses on maintenance and stability, tightening security by pinning workflow actions to specific commits and improving cache validation logic. It also refines the MCP server's behavior to exit immediately on standard input EOF or termination signals.
Full release notesOpenMAIC v1.1.3 — Security
Oct 5, 2026· 17 days ago
A security release sanitizing HTML content in `/api/persistence` endpoints to prevent cross-site scripting (XSS) vulnerabilities.
Full release notes