Releases · kittendevv/Invio

Invoice editor redesigned as client-side island for better stability and performance
Mobile-friendly invoice editor with card-based layout on small screens
Inline customer creation directly from invoice editor
Support for fractional quantities in invoice line items (e.g., 1.5, 2.75)
Fixed demo mode
Fixed authentication issues with centralized environment loading

Assets 2

26 Oct 08:25

kittendevv

V1.7.0🛡️

Security changes

Added middleware to enforce secure headers in both backend and frontend, including HSTS, CSP, and various security policies.
Replaced basic authentication with JWT bearer token for admin routes and login functionality.
Implemented safe URL parsing and validation for remote resources.
Improved error handling and response messages for authentication processes.
Updated frontend to handle JWT tokens and manage session cookies securely.
Refactored template installation logic to ensure safe file paths and identifiers.
Enhanced HTML rendering functions to escape user input and prevent XSS vulnerabilities.