Starstruk Logo MarkStarstruk

1.0.8.5

givanz/Vvveb1.0.8.5Jun 7, 2026by givanz

AI Summary

A security-focused update that introduces sanitization for global files, theme names, and user bio fields. It also adds field templates and improves URL validation to prevent IP redirections to private networks.

Key Highlights

  • Sanitized save global file and removed editor/* permission for editor role.
  • Added sanitize to user bio on profile save and sanitizeHTML to prevent XSS variants.
  • Added field templates and validated host IP address for URL validation.

New Features

  • Field templates
  • Sanitized user bio and theme names

Full Release Notes

* Sanitize save global file, removed editor/* permission for editor role, reported by @m1n9yu3 https://github.com/givanz/Vvveb/commit/c8fef41ad8651d348050c513451755ab8882b97e
* Sanitize theme name, reported by @geo-chen https://github.com/givanz/Vvveb/commit/1d76ad52402beeed623a7e386c6796126689a746
* Added sanitize to user bio on profile save, fixed sanitizeHTML to prevent more XSS variants, reported by @JosanGeorge https://github.com/givanz/Vvveb/commit/20a01ef08559ffdc97205edeecde86c8ea27e567
* Check host ip address for validateUrl to avoid ip redirects to private network, reported by @elvinsuleymanov https://github.com/givanz/Vvveb/commit/bd280f5ce136f6da22c873fb1eea9cad8741e623 
* Field templates https://github.com/givanz/Vvveb/commit/57a342b8c96872e084fef7931783243dc74438b1