Bug fixes
- Fixed a path-traversal vulnerability in bookmark restore (CWE-22). Introduced in 1.4.0. Reported by @0xRenSec.
- When bookmarked state cannot be restored, the notification shown in the client is now a generic message. The reason is logged server-side as a warning on the
shiny.bookmark._restore_statelogger, so app authors can still see it. (1d8ecb4)
Full Changelog: https://github.com/posit-dev/py-shiny/blob/v1.6.4/CHANGELOG.md