• v2.10.0-beta.4 758754b295

    oscbot released this 2026-06-10 23:09:25 +02:00 | 77 commits to beta since this release

    2.10.0-beta.4 (2026-06-10)

    Bug Fixes

    • apply hardening headers and a strict CSP to the OG crawler response (6a9138e)
    • present OG_SHARED_SECRET when fetching /api/og (3d7c4ee)
    • validate url scheme before binding to href/src (b403cfa)

    Documentation

    • explain why style-src keeps unsafe-inline (edd61b1)
    Downloads