Stable v2.10.61
Features
- Add Mail-only package type (perm_web_hosting)
Improvements
- Pin UI language in customer-modal a11y tests
- Close cross-tenant website takeover via Site-level heal
- Close cross-tenant domain takeover in executeRedirect/executeSite
- Close cross-tenant domain takeover in executeMailOnlyDomain
- Harden guard against non-ssh WebFilesRef schemes (review finding)
- Harden guard against non-ssh WebFilesRef schemes (review finding)
- Close Mail-only permission gaps found by review
- Stop DocRoot fallback from rsyncing raw Enhance container internals into public_html
- Enhance mailbox quota=0 maps to enconf's 0=unlimited convention
- Block DocRoot fallback from rsyncing Enhance container internals
- Enhance unlimited mailbox quota must stay 0, not 512