element-hq/element-web v1.6.3

on GitHub

Full Changelog

Security notice

Riot Web 1.6.3 fixes a vulnerability in single sign-on (SSO) deployments where Riot Web could be confused into sending authentication details to an attacker-controlled server. Thanks to Quentin Gliech for responsibly disclosing this via Matrix's Security Disclosure Policy.

All changes

• Fix login loop where the sso flow returns to #/login to release
  #13915