3.1.15

Changed

• Updated Summary field AJAX requests to use escape values.
• Bump verbb/auth.

Changed

• Updated Summary field AJAX requests to use submission UIDs.

Fixed

• Fix lack of sanitization of File Upload files, where the Upload Location subpath contained variables.

3.1.14

Changed

• Updated Summary field AJAX requests to use submission UIDs.
• Updated Summary field AJAX requests to use submission UIDs.

2.2.14

Changed

• Updated Summary field AJAX requests to use escape values.

Changed

• Updated Summary field AJAX requests to use submission UIDs.

Fixed

• Fix lack of sanitization of File Upload files, where the Upload Location subpath contained variables.

2.2.13

Changed

• Updated Summary field AJAX requests to use submission UIDs.

3.1.13

Fixed

• Fix lack of sanitization of File Upload files in some instances.

2.2.12

Fixed

• Fix lack of sanitization of File Upload files in some instances.

3.1.12

Changed

• Bump verbb/auth.
• Update Phone number values sent to integrations to use E164 format over International.
• Update Freshdesk “Phone” values to use international formatting.

Fixed

• Fix Turnstile timeout issues with validation and submission state.
• Fix an error when saving Web Request integrations.
• Fix client-side validation for multi-page forms where validation become “live” before the final page submit.

2.2.11

Changed

• Update Phone number values sent to integrations to use E164 format over International.
• Update Freshdesk “Phone” values to use international formatting.

Fixed

• Fix an error when saving Web Request integrations.

3.1.11

Added

• Add CSRF_TOKEN to unload exception for front-end forms.
• Add data-form-handle to <form> tag.
• Add beforeInit for Phone field’s intl-tel-input JS library.

Changed

• Bump verbb/auth.
• Remove voku/anti-xss dependancy, and switch to HTMLPurifier.
• Change user-related variables to always use the Submission’s “collected user” rather than the currently logged-in user.

Fixed

• Fix session-based page management for the front-end not respecting the sessionKey render option.
• Fix Phone field front-end not respecting countries set via Countries::EVENT_MODIFY_PHONE_COUNTRIES.
• Fix Table field not acting correctly when set to “required”.
• Fix Web Request integrations not setting the correct URL when migrated from previous Formie Webhook integration.
• Fix session storage checks for web-driven Queue jobs.

2.2.10

Added

• Add data-form-handle to <form> tag.

Changed

• Change user-related variables to always use the Submission’s “collected user” rather than the currently logged-in user.

Fixed

• Fix Web Request integrations not setting the correct URL when migrated from previous Formie Webhook integration.