Song: https://youtu.be/reXhjQ50iug
This is a small maintenance release addressing community reported issues related to the recently introduced Duo v4 support.
This release also includes a security fix for the browser extension to mitigate clickjacking attacks discovered during an independent security audit of the API and browser extension by Cure53. As always, detailed findings will be published on our dedicated incident page soon.
Thank you to the members of the community who’ve reported issues and helped us fix them.
[3.11.1] - 2023-03-03
Fixed
PB-23283 As an administrator I can disable username validation in Duo Callback endpoints