Starstruk Logo MarkStarstruk

1.0.8.5

PostHog/posthog.com1.0.8.5Jun 7, 2026by givanz

AI Summary

This release focuses on security hardening and bug fixes, specifically addressing XSS vulnerabilities and refining user permissions and input validation. It also introduces new field templates.

Key Highlights

  • Enhanced security with XSS fixes and sanitization updates
  • Removed 'editor/*' permission for editor role for better security
  • New field templates feature added
  • IP address validation added for URL checks to prevent private network redirects

Breaking Changes

  • Removed 'editor/*' permission for editor role

New Features

  • Field templates

Full Release Notes

* Sanitize save global file, removed editor/* permission for editor role, reported by @m1n9yu3 https://github.com/givanz/Vvveb/commit/c8fef41ad8651d348050c513451755ab8882b97e
* Sanitize theme name, reported by @geo-chen https://github.com/givanz/Vvveb/commit/1d76ad52402beeed623a7e386c6796126689a746
* Added sanitize to user bio on profile save, fixed sanitizeHTML to prevent more XSS variants, reported by @JosanGeorge https://github.com/givanz/Vvveb/commit/20a01ef08559ffdc97205edeecde86c8ea27e567
* Check host ip address for validateUrl to avoid ip redirects to private network, reported by @elvinsuleymanov https://github.com/givanz/Vvveb/commit/bd280f5ce136f6da22c873fb1eea9cad8741e623 
* Field templates https://github.com/givanz/Vvveb/commit/57a342b8c96872e084fef7931783243dc74438b1