Authentication Hardening & Compatibility
Web App
Hardened route guards and authentication boundaries, fixed Vault Key base64 encoding for Unicode compatibility, and adjusted CSP rules for optimal React execution.
#Authentication Hardening & Compatibility
A massive under-the-hood release dedicated to fortifying our authentication boundaries, session guards, and cryptographic encoding logic.
Important
All custom vault keys containing non-Latin characters (e.g. emojis or Arabic characters) are now fully supported across all browsers.
#Security Enhancements
- Strict Route Guards: Patched an edge case where unverified or partially-authenticated users could access settings prematurely. The email verification gate is now strictly enforced across all protected routes.
- Unicode Vault Key Encoding: Fixed a critical bug where custom vault keys containing non-Latin characters could crash the browser session. All vault keys are now safely Base64 encoded before transit.
- CSP & React Compatibility: Fine-tuned our Content Security Policy (CSP) headers to ensure optimal React execution without compromising strict eval-free policies in production.
ShellShell
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';