mirror of
https://gitlab.com/ArkHost/WHMCS-ArkhostVPSAG.git
synced 2026-07-23 23:36:06 +02:00
Bump version to 1.6
This commit is contained in:
@@ -177,6 +177,15 @@ Override translations by creating files in:
|
||||
|
||||
## Changelog
|
||||
|
||||
### Version 1.6
|
||||
- Security hardening:
|
||||
- Decrypted reseller API credentials are no longer written to the module log
|
||||
- Client-supplied values used in API URL paths are now validated (prevents path/parameter injection and cross-tenant access)
|
||||
- Suspension now uses Disable/Enable, and VPS control actions are blocked while a service is not active
|
||||
- Provisioning callback signature is verified with a constant-time comparison
|
||||
- Output escaping added for server/OS data in the client area, settings, and error templates
|
||||
- Fixed callback IP assignment: all additional IPv4 addresses are kept and stored newline-separated
|
||||
|
||||
### Version 1.5
|
||||
- WHMCS v9 compatibility: Updated Smarty template syntax for Smarty v4
|
||||
- Added VNC Display Mode setting: choose between new tab or embedded in client area
|
||||
|
||||
Reference in New Issue
Block a user