v5.27.1

Bug Fixes

  • Security: Fixed XSS vulnerability in search highlight match bindings by implementing centralized HTML entity escaping via EscapeHTML utility
  • Connectivity: Improved server connectivity reliability by replacing 30-second polling heartbeat with socket-primary approach, using /healthcheck endpoint only as fallback when GraphQL socket disconnects
  • CORS: Fixed CORS configuration on /healthcheck route for proper cross-origin access
  • URL Resolution: Enhanced health check URL derivation using new URL('/healthcheck', base) for correct resolution regardless of GRAPHQL_URI suffix

Improvements

  • Enhanced connection stability with socket-based communication as primary method
  • Centralized HTML escaping utility for consistent XSS protection across components
  • Fallback mechanism ensures connectivity even when primary socket connection fails