Axigen 10.6.27

SECURITY

• Fix XSS scenario when printing a specific malicious message (AXI-6913)
• Fix XSS scenario when printing a specific malicious message (AXI-6915)
• Fix XSS scenario caused by "noscript" consuming tag (AXI-6919)
• Fix XSS scenario caused by "textarea" consuming tag (AXI-6920)

SERVER

• Fix CryptStream segmentation fault scenario (AXI-6815)
• Update "Send Mail As" API endpoints terminology from "address" to "emailAddress" (AXI-6959)
• Update SQLite to 3.51.2 (AXI-6962)
• Lock domain storage parameters from server config during domain creation / deletion / editing (AXI-6963)
• Align 2-Step Verification for WebAdmin security method last used date across WebAdmin sections (AXI-6977)
• Fix GET /api/v1/account/vacation endpoint returning error code 500 on missing filter (AXI-6978)
• Fix crash scenario when parsing iTip messages (AXI-6981)

WEBADMIN

• Add 2-Step Verification status and revoke options for administrative users (AXI-6926)

WEBMAIL

• Composer: Fix HTML editor email address auto-conversion generating incorrect links (AXI-6883)
• Composer: Fix attachment sizes displaying as raw bytes instead of human-readable units right after upload (AXI-6957)