LIFF SDK XSS vulnerability disclosure and usage restrictions on older versions
Due to an XSS vulnerability in older LIFF SDK versions, LINE plans to restrict the use of affected versions in external browsers.
LIFF v2.31.0 release, deprecation due to vulnerability, and planned usage restriction
After LIFF v2.31.0 was released with internal behavior changes, it was deprecated due to a security bug and faces planned usage limits.
LIFF v2.30.0 release, subsequent deprecation due to security flaw, and planned restriction
LIFF v2.30.0 added arguments to three friendship and permission methods, but was later deprecated due to a security issue with usage restrictions planned.
LIFF v2.29.2 release, deprecation due to a security issue, and planned usage restrictions
LIFF v2.29.2 was released with internal SDK behavior changes, then deprecated due to a security issue with usage restrictions planned.
LIFF v2.29.1 release, deprecation due to a security bug, and planned usage restrictions
LIFF v2.29.1 was released with internal behavior changes, then deprecated due to a security issue with usage restrictions planned.
LIFF SDK older versions to be restricted, requiring update to v2.31.1 or later
Older LIFF SDK versions face planned usage restrictions due to vulnerabilities, requiring an update to v2.31.1 or later.
Older LIFF SDK versions to be restricted and liff.requestFriendship() available
While you can now prompt users to add friends in LIFF v2.28.0, older SDK versions will be restricted due to a security vulnerability.
LIFF v2.31.2 release and change to handling of ? in LIFF URL query parameters
LIFF v2.31.2 changes how question marks in LIFF URL query parameter values are restored in the secondary redirect URL inside the LIFF browser.
LIFF v2.31.1 security bug fix and deprecation of v2.20.0 to v2.31.0
LIFF v2.31.1 fixes a potential security bug in the LIFF SDK, and versions v2.20.0 through v2.31.0 have been deprecated.