This is a security fix release. Please consider upgrading it.

​

🎄 Enhancement

• Fixed a bunch of security issues found by huntr.dev

1. Reject the current user operation if the user has just been de-activated.

2. Secure the access token to prevent CSRF attack.

3. Disallow Bytebase to be loaded in an iframe.

​

🎠 Community

• Thanks @jiweiyuan to fix our first good first issue

​

⚙️ Install and Upgrade

• Fresh install: /get-started/self-host

• Upgrade: /get-started/upgrade

Warning: Bytebase does not support in-place downgrade. Make sure to back up your metadata before upgrading.