Proposals and Contracts: the document designer now keeps exactly what a document is made of text, tables, pictures, links, colours and layout and quietly drops anything that could run code (scripts, embedded frames, forms, event handlers). A page picked from the template gallery looks the same as before. The same rule applies to proposal and contract templates and to the mobile App's contract editor.
Links in a proposal or contract that open in a new tab no longer let the opened page take control of the original tab.
Fix
Proposals and Contracts: a < or > typed in the designer (for example "price < 100") stays as typed in the preview, the PDF and the page the client opens, instead of being read as hidden markup. A client's company name or address with special characters shows exactly as entered.
Invoices, Estimates, Proposals and Contracts: line items, notes and the contract title are stored safely when they contain special characters or pasted markup.
Items: a saved item's extra details (ticket options, store settings) are stored safely whatever characters they contain.
Settings: the names and colours of task statuses, task priorities, project statuses, lead statuses, labels, checklist templates and roles, and a team member's job title, are stored safely; an invalid colour falls back to the default.
Labels: after adding a label, the new label not the one being edited is the one the list highlights.
GitHub connection: issue titles, comments and label colours synced from GitHub are stored safely.
Custom fields: column headings with special characters show correctly in every list.
Team Messenger and File Manager: member and folder selections are read strictly as lists of records.
Sign-in: the previous person's cached first screen of a list is cleared when someone else signs in on the same browser.
