20 August 2025
Release date: 20 August 2025
Release Notes
Section titled “Release Notes”Features
Section titled “Features”- Control Referrer Information Leakage: Implemented the Referrer-Policy header for Console to enhance user privacy and security by controlling referrer information in requests.
- Protect Against Clickjacking (Console): Added the X-Frame-Options header to prevent the console from being embedded in malicious sites, protecting users from clickjacking attacks.
- Prevent MIME-Type Sniffing: Implemented the X-Content-Type-Options header on all responses for Console to prevent browsers from MIME-sniffing the content type, reducing the risk of misinterpreting responses and executing malicious content.
- Enforce Secure Transport (HSTS): Implemented the Strict-Transport-Security (HSTS) header on all HTTPS responses for Console to ensure browsers only communicate with API Cloud services over HTTPS, preventing SSL stripping and man-in-the-middle attacks.
- Spec Migration Issue in Staging: Fixed the issue where spec migration was not happening in the staging environment, ensuring the spec migration lambda runs as expected.