What's New in this Release

Added Blacklist domains option

Users can now blacklist private networks, hosts or subnets to avoid Server Side Request Forgeries (SSRF) through the Blacklist domains configuration option. By default, this option is disabled. If enabled, users can view a list of sites that are commonly blacklisted. If a request from any of these sites is received after enabling the option, the user is prompted to contact the System Administrator for further processing, or, an error message is displayed.

To view the default list of sites that can be blacklisted, click the link named "listed". A pop-up with the most commonly blacklisted sites appears as shown:

Enhanced security against XSS vulnerabilities

This app version now has enhanced security implemented to handle any cross-site scripting from the macros.