Cursor Agent
893384a19d
fix: load survey script directly via src instead of blob URL
...
Fixes FORMBRICKS-TQ
The blob URL approach was being blocked by CSP which doesn't include 'blob:'
in script-src directive. Simplified to load script directly via src attribute:
- Works with existing CSP ('self' is allowed)
- No need for fetch, blob URLs, or eval
- Properly executes and initializes window.formbricksSurveys
- Adds cache-busting in development for fresh script loads
2026-03-18 13:05:54 +00:00
Cursor Agent
1eba663294
chore: remove test files
2026-03-18 12:33:26 +00:00
Cursor Agent
c37e5c0750
chore: add blob URL test results screenshot - all tests passing
2026-03-18 12:32:43 +00:00
Cursor Agent
75e47b4979
fix: use blob URL to execute survey script and initialize window.formbricksSurveys
...
Fixes FORMBRICKS-TQ
The script content was being assigned to textContent which may not execute
properly in all contexts. Changed to use a Blob URL approach which:
- Creates a blob from the fetched script content
- Loads it via script src attribute (works with CSP without unsafe-eval)
- Properly waits for script execution before proceeding
- Ensures window.formbricksSurveys is initialized correctly
- Cleans up the blob URL after loading to prevent memory leaks
2026-03-18 12:31:17 +00:00
Cursor Agent
7504c47fc1
fix: execute survey script in global scope to initialize window.formbricksSurveys
...
Fixes FORMBRICKS-TQ
The script content was being assigned to textContent instead of being
executed, preventing the window.formbricksSurveys object from being
initialized. Changed to use indirect eval pattern to execute the script
content in the global scope, ensuring proper initialization.
2026-03-18 12:22:53 +00:00
Balázs Úr
9a6cbd05b6
fix: mark various strings as translatable ( #7338 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-18 11:30:38 +00:00
Johannes
94b0248075
fix: only allow URL in exact match URL ( #7505 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-18 07:20:14 +00:00
Johannes
082de1042d
feat: add validation for custom survey closed message heading ( #7502 )
2026-03-18 06:40:57 +00:00
Johannes
8c19587baa
fix: ensure at least one filter is required for segments ( #7503 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-18 06:39:58 +00:00
Anshuman Pandey
433750d3fe
fix: removes pino pretty from edge runtime ( #7510 )
2026-03-18 06:32:55 +00:00
Johannes
61befd5ffd
feat: add enterprise license features table ( #7492 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-18 06:14:40 +00:00
Dhruwang Jariwala
1e7817fb69
fix: pre-strip style attributes before DOMPurify to prevent CSP violations ( #7489 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
2026-03-17 15:33:44 +00:00
Anshuman Pandey
f250bc7e88
fix: fixes race between setUserId and trigger ( #7498 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-17 08:57:07 +00:00
Santosh
c7faa29437
fix: derive organizationId from resources in server actions to prevent cross-org IDOR ( #7409 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-17 05:36:58 +00:00
Anshuman Pandey
a51a006c26
fix: fixes data element i18n fixes ( #7488 )
4.8.0-rc.2
4.8.0
2026-03-16 10:12:48 +00:00
Matti Nannt
ce96cb0b89
feat: replace hosted stripe pricing table ( #7486 )
...
Co-authored-by: Johannes <johannes@formbricks.com >
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-16 10:11:40 +00:00
Matti Nannt
fb265d9dba
feat: add SAML telemetry reporting ( #7461 )
2026-03-16 09:41:33 +00:00
Matti Nannt
e4c155b501
fix: defer hobby subscription creation ( #7484 )
2026-03-15 14:13:53 +00:00
Johannes
2dc5c50f4d
feat: implement trial days remaining alert in billing components ( #7474 )
2026-03-13 16:38:43 +01:00
Anshuman Pandey
bddcec0466
fix: adds monkey patching for replaceState ( #7475 )
2026-03-13 13:40:20 +00:00
Dhruwang Jariwala
92677e1ec0
fix: respect overwriteThemeStyling in link survey metadata ( #7466 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
2026-03-13 13:07:54 +00:00
Anshuman Pandey
b12228e305
fix: fixes button url fixes in survey editor ( #7472 )
2026-03-13 13:07:41 +00:00
Dhruwang Jariwala
91be2af30b
fix: add missing Stripe billing setup for setup route org creation ( #7470 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-13 14:18:01 +01:00
Anshuman Pandey
84c668be86
fix: fixes contact links api gating issue ( #7468 )
2026-03-13 11:09:53 +00:00
Dhruwang Jariwala
4015c76f2b
fix: use logical CSS direction classes for RTL matrix question ( #7463 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-13 10:06:41 +00:00
Dhruwang Jariwala
a7b2ade4a9
fix: remove follow-ups from trial features and gate trial page for subscribers ( #7465 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-13 10:00:23 +00:00
Dhruwang Jariwala
75f44952c7
fix: clear validation settings when disabling open text validation ( #7464 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-13 09:39:42 +00:00
Bhagya Amarasinghe
0df5e26381
fix: handle license 403 as instance mismatch ( #7458 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
4.8.0-rc.1
2026-03-12 10:46:44 +00:00
Matti Nannt
89bb3bcd84
chore: apply NCU minor upgrades fixups ( #7460 )
2026-03-12 10:44:18 +00:00
Harsh Bhat
30fdb72c09
feat: add PostHog analytics ( #7454 )
...
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
2026-03-12 09:53:14 +01:00
Matti Nannt
cb58cf5825
fix: restrict selected entitlements during trial ( #7456 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-12 08:10:23 +00:00
Johannes
99bd2ba256
feat: add reverse trial functionality ( #7435 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Matti Nannt <matti@formbricks.com >
2026-03-11 14:47:48 +00:00
Anshuman Pandey
9df423073f
fix: zlib CVE ( #7444 )
2026-03-11 11:10:29 +00:00
Johannes
3e3c696972
feat: add trigger after time passed ( #7452 )
...
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
2026-03-11 10:12:31 +00:00
Anshuman Pandey
cb41e2d344
fix: sets apps/web TS strict check to true ( #7451 )
2026-03-11 10:14:37 +01:00
Matti Nannt
1e19cca7d9
feat: implement cloud stripe billing sync and pricing revamp ( #7309 )
...
Co-authored-by: Johannes <johannes@formbricks.com >
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-10 16:04:23 +00:00
Johannes
fa882dd4cc
fix: improve survey validation error handling in SurveyMenuBar component ( #7447 )
2026-03-10 10:23:05 +00:00
Matti Nannt
0b82c6de77
feat: move multi-language surveys and workspace languages to AGPL ( #7426 )
...
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
2026-03-10 09:28:01 +00:00
Balázs Úr
a944d7626e
chore: use Unicode punctuation, remove contractions, make wording consistent ( #7355 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-10 07:06:30 +00:00
Balázs Úr
d1b12dc228
fix: mark strings as translatable in survey editor ( #7369 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-10 06:14:29 +00:00
Bhagya Amarasinghe
9f7d6038b1
docs: add CDN guidance for self-hosting ( #7446 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-10 06:12:36 +00:00
Balázs Úr
1da92addd2
fix: Hungarian translations ( #7434 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-09 12:31:24 +00:00
Dhruwang Jariwala
1e4aa5f54b
fix: strip inline styles preserve target attr ( #7441 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-09 12:09:51 +00:00
Anshuman Pandey
96f173c3b1
fix: overrides packages for CVE fixes ( #7442 )
2026-03-09 09:55:02 +00:00
Harsh Bhat
9c9e55fba6
docs: add keycloack docs ( #7440 )
2026-03-09 08:38:00 +00:00
Johannes
42541f86fd
feat(navigation): add workflows section to main navigation and update… ( #7392 )
2026-03-08 18:13:38 +00:00
Matti Nannt
0ba469a73d
fix: pin fast-xml-parser to 5.3.5 ( #7436 )
2026-03-06 20:20:34 +01:00
Matti Nannt
afa192e5b9
chore: upgrade deps and Zod v4 migration ( #7425 )
...
Co-authored-by: pandeymangg <anshuman.pandey9999@gmail.com >
2026-03-06 14:41:28 +01:00
Bhagya Amarasinghe
4860a9a5cf
fix: helm template duplicate label key in migration-job ( #7431 )
...
Co-authored-by: Rob <178471500+rob-htl@users.noreply.github.com >
2026-03-06 11:48:07 +00:00
Chowdhury Tafsir Ahmed Siddiki
af02ce9ea6
fix: display native language names in profile language selector ( #7349 )
...
Co-authored-by: Dhruwang <dhruwangjariwala18@gmail.com >
2026-03-06 10:18:52 +00:00