1.23.7

louislam/uptime-kuma1.23.7Nov 24, 2023by louislam

AI Summary

Security and stability release fixing XSS vulnerability, Tailscale security issues, memory leaks, and reverting problematic heartbeat changes.

Key Highlights

Fixed XSS vulnerability in Google Analytics ID field
Fixed Tailscale ping security issue
Fixed PostgreSQL connection memory leak
Reverted restart running monitors behavior
Added +10 seconds for abort signal timeout

New Features

XSS vulnerability fix
Tailscale security improvement
Memory leak fix
Enhanced timeout error messages

Full Release Notes

### 💇‍♀️ Improvements
- #4053 Show the original timeout message again and +10 seconds for abort signal
- #4054 Improved error message on abort signal timeout (Thanks @chakflying)

### 🐞 Bug Fixes
- #4084 Fixed a memory leak issue. Close the client postgresql connection after rejection. (Thanks @mvaled)
- #4088 Reverted "Restart running monitors if no heartbeat", which causes some issues from 1.23.4 to 1.23.6.

### ⬆️ Security Fixes
- f28dccf4e11f041564293e4f407e69ab9ee2277f An XSS issue in the "Google Analytics ID" text field (Reported by @gtg2619) https://github.com/louislam/uptime-kuma/security/advisories/GHSA-v4v2-8h88-65qj
- #4095 Rewrite Tailscale ping using spawnSync (Reported by @vaadata-pascala) https://github.com/louislam/uptime-kuma/security/advisories/GHSA-hfxh-rjv7-2369
- b689733d59139f158de95b0017865c867d0c7159 `getGameList`, `testChrome` are no longer accessible without login

### Others
- Other small changes, code refactoring and comment/doc updates in this repo: