↑ ↓ to navigate
↵ to select
esc to close
v0.15.2 Bugfix

v0.15.2 - Clean 404s for malformed and probing requests

Customer sites answer malformed and probing requests with a plain 404 instead of 406, 422 or 500.

Fixes

  • A body-less request with an unparsable Content-Type header (scanners and broken proxies send *) no longer answers 406 for a site's home page.
  • A request for a missing .js path on a customer site returns a plain 404 (it previously returned 422). Existing script assets are unaffected.
  • Routes for actions that do not exist (GET /session, GET /registration, api/v1 users, auth and password) no longer 500. GET /session and GET /registration redirect to the sign-in and sign-up forms.
  • An unknown asset or blueprint id in the content UI returns 404 instead of 500.

Changes

  • Dependency updates, including Liquid 5.14 and Avo 4.2.5.