Tilspire 1.0.0-rc.2

tilspire 1.0.0-rc.2 is out — a release candidate focused on hardening, not new features.

A security-hardening release #

This release tightens the boundaries around content and access, and matures the signed-update pipeline that ships with every release.

What changed #

• Stored content now goes through sanitisation before it's saved, so pasted or injected markup can't carry unsafe scripts or attributes into your pages.
• Role and permission checks around admin actions were reviewed and strengthened.
• Two-factor authentication and login-attempt throttling were both improved.
• The signed-update pipeline — checksum and signature verification on every package — matured ahead of a general release.

Still a release candidate #

rc.2 is a step toward 1.0, not 1.0 itself. Install it to evaluate tilspire and see how it fits your workflow, and treat it as pre-release software in the meantime.

See Download for the package, or apply it to an existing install from Admin ▸ Updates.