Have you seen...?

Welcome back to our Have you seen...? series for XenForo 2.4! The code reviews are coming in thick and fast as we complete our planned features so there should be plenty to show you over the coming weeks. Part of our process for this and previous releases has involved looking at the amazing pool of developer talent that we have in this community and considering how we can work with those developers to bring those features to the core. And that's the focus of this time where we'll be taking a look at the Chunked Uploads add-on by @JulianD which, starting with XenForo 2.4, will become a core feature. But first... We have decided to accelerate our plans to modernise the minimum version of PHP that is supported by XenForo. While we had...

XenForo 2.3.9 Released Today we are releasing XenForo 2.3.9 to address some potential security vulnerabilities that were recently reported to us. This version only includes security fixes and any bug fixes we previously said would make it to 2.3.9 have now been delayed until 2.3.10. It is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability. The issues identified are as follows: Prevention of a possible stored XSS (cross-site scripting) exploit related to BB code rendering (thank you to Antisocial) Prevention of a possible XSS exploit related to lightbox usage in posts (thank you UwU)...

XenForo 2.3.7 Released XenForo 2.3.7 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability. In addition to the usual fixes and improvements, XenForo 2.3.7 also includes a critical security fix to ensure the security of Passkeys that have been added to your account. We'd very much like to thank Jai Niresh J for reporting this issue via Eric and team at Hypixel Inc.. Between them they also reported a less severe issue related to local account page caching on shared systems. This version also tightens up the kinds of methods that can be called from within templates, evolving from a loose...