• New: Added new Abilities to sync and pull widget code, set widget thumbnails, and validate widgets.

• New: Added new Abilities to import code snippets and delete a snippet everywhere it is used.

• Improved: Hardened security across widget import and preview by adding path-traversal protection and safer handling of external data.

• Improved: Added SSRF safeguards for image URLs and stricter ownership checks on workspace IDs.

• Improved: Removed an unused unauthenticated (nopriv) AJAX registration.

• Fixed: Minor Bug Fixes & Improvements.

Published: about 2 months ago