Release v1.1.1 - External storage support & security update

- Add external storage support (SMB, SFTP, S3, local mounts) for public share links
- Update fast-xml-parser 5.5.7 → 5.7.1 (security fix)
- Modernize strpos() to str_starts_with() in FormService

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Rikdekker

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to FormVox will be documented in this file.
 
+## [1.1.1] - 2026-04-23
+
+### Added
+- **External storage support** — Forms stored on external storage mounts (SMB, SFTP, S3, local mounts) can now be loaded via public share links ([#55](https://github.com/nextcloud/formvox/pull/55))
+
+### Security
+- Updated `fast-xml-parser` from 5.5.7 to 5.7.1 (fixes malicious CDATA/comment sanitization and stack overflow on long tag expressions)
+
 ## [1.1.0] - 2026-04-20
 
 ### Added

appinfo/info.xml

@@ -35,7 +35,7 @@
 * Expense declarations
 * Data collection with privacy requirements
     ]]></description>
-    <version>1.1.0</version>
+    <version>1.1.1</version>
     <licence>agpl</licence>
     <author mail="info@voxcloud.nl">Sam Ditmeijer</author>
     <author mail="info@voxcloud.nl">Rik Dekker</author>

js/formvox-admin.js

@@ -79,7 +79,7 @@
 * @license MIT, https://github.com/focus-trap/tabbable/blob/master/LICENSE
 */
 
-/*! @license DOMPurify 3.3.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.2/LICENSE */
+/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
 
 /**
 * @vue/reactivity v3.5.26

js/formvox-admin.js.LICENSE.txt

@@ -79,7 +79,7 @@
 * @license MIT, https://github.com/focus-trap/tabbable/blob/master/LICENSE
 */
 
-/*! @license DOMPurify 3.3.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.2/LICENSE */
+/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
 
 /**
 * @vue/reactivity v3.5.26

js/formvox-editor.js

@@ -16,6 +16,6 @@
  * MIT Licensed
  */
 
-/*! @license DOMPurify 3.3.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.2/LICENSE */
+/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
 
 /*! http://mths.be/fromcodepoint v0.1.0 by @mathias */

js/formvox-editor.js.LICENSE.txt

@@ -79,7 +79,7 @@
 * @license MIT, https://github.com/focus-trap/tabbable/blob/master/LICENSE
 */
 
-/*! @license DOMPurify 3.3.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.2/LICENSE */
+/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
 
 /**
 * @vue/reactivity v3.5.26