LIFF v2.31.1 security bug fix and deprecation of v2.20.0 to v2.31.0

LINE DevelopersSecurity

LIFF v2.31.1 fixes a potential security bug in the LIFF SDK, and versions v2.20.0 through v2.31.0 have been deprecated.

Required action

If you use LIFF v2.20.0 through v2.31.0 via a fixed CDN path or the @line/liff npm package, promptly update to LIFF v2.31.1.

Changes

  • Fixed an internal LIFF SDK issue that occurs when opening a LIFF app in an external browser from a URL with crafted query parameters
  • Deprecated LIFF versions v2.20.0 through v2.31.0 due to potential security impact without changing LIFF app functionality
  • Users of the CDN edge path are automatically updated to v2.31.1 and require no additional action

Affected areas

@line/liffhttps://static.line-scdn.net/liff/edge/2/sdk.jshttps://static.line-scdn.net/liff/edge/versions/2.31.1/sdk.js

Open official page

This summary is independently created by Release Radar and is not an official announcement from the vendor. Please read the official page for accurate details.

More updates