v7.2.0 (2026-11-03)
Bug Fixes
-
email: Escape profile data in notification emails (
b094ea9) -
i18n: Correct and complete Hungarian localization (
fa963cc) -
pagination: Rewrite ReplaceQueryString with league/uri (
7e4b8b7) -
paging: Reject invalid page numbers and page sizes (
e42139f) -
reservation: Prevent XSS when rendering user names in reservation (
3840222) -
reservations: Match LoadFiltered() parameter name to interface (
0bcaf18) -
security: Prevent XSS from profile data in templates (
44b5446) -
security: Prevent XSS from user names in schedule and groups (
e8443fe)
Chores
- Have readthedocs build use Python 3.14 (
0214942)
Continuous Integration
- Greet first-time contributors and point them to Discord (
e818463)
Documentation
-
Add 7.2.0 security upgrade notice (
0572f3f) -
Encourage contributors to join Discord (
ca1664f) -
Point contributors to Discord in CONTRIBUTING and stale bot (
05584a5) -
Use only Assisted-by for AI attribution (
8731106)
Features
- admin: Show versions and PHP details on Server Settings page (
e585f60)
Refactoring
-
Update Swedish translations for resources (
4ccadeb) -
export: Load all rows for CSV exports explicitly (
1010913)
Detailed Changes: v7.1.0...v7.2.0