← v2026.4.14

Slack interaction allowlist hardening

v2026.4.14 · Release notes

Tighter allowlist checks and sender verification for Slack interactive events.

Slack interaction allowlist hardening

Interactive Slack events (block actions and modals) now enforce:

  • global allowFrom owner allowlists
  • expected sender-id cross-verification
  • rejection of ambiguous channel types

Open-by-default behavior remains when no allowlists are configured.