github SonicJs-Org/sonicjs v3.0.0-beta.28

2 hours ago

What's New

✨ Features

  • Two-Factor Authentication — TOTP authenticator app support (Google Authenticator, Authy, 1Password) with 10 single-use backup codes. Enable via twoFactorAuthPlugin and enroll from Admin → Settings → Security.
  • GraphQL plugin — full document CRUD via GraphQL. Enable graphqlPlugin for /graphql endpoint with GraphiQL explorer.

🔒 Security

  • XSS fix — escape media field values in dynamic fields against stored XSS

🐛 Fixes

  • Preserve content title on edit for schemas without explicit title property
  • Stop auto-installing plugins on detail page click
  • Use 127.0.0.1 instead of localhost for CORS_ORIGINS defaults
  • UI spacing between Two-Factor Recovery and Danger Zone panels

Installation

npm create sonicjs@latest my-app

Or update existing project:

npm install @sonicjs-cms/core@3.0.0-beta.28

Don't miss a new sonicjs release

NewReleases is sending notifications on new releases.