v2026.10.5 v1.1.3
UNITRONIX/BetterDeskOct 5, 2026 → Oct 5, 20260 days between releases
What's New
Security release sanitizes slide HTML to prevent script injection vulnerabilities.
Breaking Changes
- Slide HTML written through `/api/persistence` is reduced to the renderer's formatting vocabulary.
- Scripts, event-handler attributes, and `javascript:` URLs are removed from documents.
Improvements
- `/api/persistence` now applies sanitization policy to HTML on every write and read.
- Documents already stored are sanitized when read.
- Inline styles are re-serialized without spaces.
Upgrade Notes
Slide HTML written via `/api/persistence` will be stripped of scripts, event handlers, and `javascript:` URLs. Existing documents will be sanitized upon reading, though inline styles may change format. Review any custom slide HTML that relies on scripts or specific inline styles.
The Two Releases
v2026.10.5
Oct 5, 2026· 17 days ago
The update improves cross-platform compatibility by fixing Windows test suite issues and resolves parsing issues with ADB outputs using CRLF line endings.
Full release notesOpenMAIC v1.1.3 — Security
Oct 5, 2026· 17 days ago
A security release sanitizing slide HTML in course documents to prevent script injection vulnerabilities.
Full release notes