Skip to content
Back to changelog
v2.3.1
Patch a session-fixation issue in preview links
Fixed
Security
Preview links generated before v2.3.0 could be replayed after logout. Preview tokens now expire on session end and are scoped to a single viewer.
Fixed
Preview links no longer remain valid indefinitely after the linked draft is published.
Security
Preview tokens now expire when the issuing session ends and are scoped to a single viewer, closing a session-fixation gap in links generated before v2.3.0.