This release fixes issues for SREs watching stability and regressions.
Published 1mo
Productivity & Wikis
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
budget-tracker
collaborative
opensource
packing-list
poi
real-time
+11 more
routes
self-hosted
travel
travel-app
travel-planner
traveling
trip
trip-planner
wanderlog
wanderlust
webapplication
Summary
AI summaryFixed OSRM routing requests being blocked by CSP due to missing trailing slash in connect-src directive.
Full changelog
Release Notes — v2.9.2
Bug Fixes
- CSP: Fix OSRM routing requests being blocked by the Content Security Policy. The connect-src directive for the OSRM route endpoint was missing a trailing slash, causing the browser to treat it as an exact path match rather than a prefix match.
- Memories: Re-fetch EXIF info when navigating between lightbox photos. The navigation arrows were clearing the lightbox metadata without reloading it, causing the EXIF sidebar to disappear and navigation button placement to break. (#439)
- Reservations: Hide price and budget fields in the reservation modal when the Budget addon is disabled. (#440)
- Trip: Redirect to the Plan tab when the previously active tab's addon is disabled. If a user's last visited tab belonged to an addon that was disabled while they were away, reopening the trip now resets to the Plan tab instead of showing an inaccessible page. (#441)
Full Changelog: https://github.com/mauriceboe/TREK/compare/v2.9.0...v2.9.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]