3
[ ~/proxbox-api/releases/v0.0.8.post1 ]tty0

emerson@netdevops:~/proxbox-api$ gh release view v0.0.8.post1 --repo emersonfelipesp/proxbox-api

back to releases / back to project

proxbox-api v0.0.8.post1

[open on GitHub]
tag=v0.0.8.post1state=stablepublished=2026-04-23synced=2026-05-07 07:04 UTC
author
emersonfelipesp
created
2026-04-23 18:02 UTC
target
main
downloads
0

emerson@netdevops:~/proxbox-api$ cat RELEASE_NOTES.md

proxbox-api v0.0.8.post1

Patch release on top of v0.0.8 fixing the API documentation UI.

What's fixed

  • Self-hosted Swagger UI and ReDoc assetsswagger-ui-bundle.js, swagger-ui.css, and redoc.standalone.js are now served from /static/swagger-ui/ instead of loading from external CDNs (cdn.jsdelivr.net, fonts.googleapis.com). This fixes blank documentation pages in network-isolated environments and resolves CSP violations caused by SecurityHeadersMiddleware.

  • Docs-specific Content Security Policy/docs and /redoc now receive a targeted CSP (script-src 'unsafe-inline', style-src 'unsafe-inline', img-src data:) that allows Swagger UI's inline initialisation script and ReDoc's React inline styles to execute. All other endpoints retain the strict default-src 'self' policy.

  • ReDoc Google Fonts removedwith_google_fonts=False is set on the custom /redoc route, eliminating the fonts.googleapis.com and fonts.gstatic.com requests that were blocked by the CSP.

Upgrade notes

No database migrations or configuration changes required. Restart the server after upgrading.

emerson@netdevops:~/proxbox-api$ gh release download --pattern '*'

assets

no binary assets attached

source code