Bump version to 1.6

This commit is contained in:
Yuri Karamian
2026-06-22 01:31:44 +02:00
parent 7ccc92a039
commit 61b4c576c9
5 changed files with 13 additions and 4 deletions
+9
View File
@@ -177,6 +177,15 @@ Override translations by creating files in:
## Changelog
### Version 1.6
- Security hardening:
- Decrypted reseller API credentials are no longer written to the module log
- Client-supplied values used in API URL paths are now validated (prevents path/parameter injection and cross-tenant access)
- Suspension now uses Disable/Enable, and VPS control actions are blocked while a service is not active
- Provisioning callback signature is verified with a constant-time comparison
- Output escaping added for server/OS data in the client area, settings, and error templates
- Fixed callback IP assignment: all additional IPv4 addresses are kept and stored newline-separated
### Version 1.5
- WHMCS v9 compatibility: Updated Smarty template syntax for Smarty v4
- Added VNC Display Mode setting: choose between new tab or embedded in client area