v2026.10.28.03 – v2026.10.28.04 — 2026-10-28
Features
- Add ClouDNS Sync extension
Improvements
- Record HandleHook audit for the 6 remaining extensions
- Add X-Enconf-Hook-Secret guard to hook endpoint
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Add X-Enconf-Hook-Secret guard to HandleHook
- Close Connection-header smuggling bypass of hook guard
- Close predictable crypto key and cross-tenant hook bypass
- Suppress gosec G101 false positive on password mask constant
- Mask password-type settings in admin settings API