What's Changed
- Fix z-index issue with changelog badges by @stayallive in #368
- Fix private comment exposure on public profiles by @bjarn in #369
- Validate intended login redirects by @bjarn in #378
- Authorize project board routes by @bjarn in #373
- Treat widget submissions as anonymous by @bjarn in #370
- Hide private project comments from recent comments by @bjarn in #375
- Require origin for restricted widgets by @bjarn in #376
- Rate limit roadmap password attempts by @bjarn in #379
- Protect private project activity by @bjarn in #371
- Enforce board comment restrictions on the server by @bjarn in #372
- Enforce board vote restrictions on the server by @bjarn in #377
- Fix language files that break Spanish, Welsh and Uzbek locales by @theluckystrike in #380
- Authorize private note creation by @bjarn in #374
New Contributors
- @theluckystrike made their first contribution in #380
Full Changelog: 4.27...4.28