# Kanboard 1.2.41

**URL:** <https://kanboard.discourse.group/t/kanboard-1-2-41/3289>\
**Category:** Releases\
**Created:** [October 26, 2024, 9:52pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289 "2024-10-26T21:52:41Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@fred](https://kanboard.discourse.group/u/fred)\
**Post date:** [October 26, 2024, 9:52pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/1 "2024-10-26T21:52:41Z")

</div>

- Download: [https://github.com/kanboard/kanboard/releases/tag/v1.2.41](https://github.com/kanboard/kanboard/releases/tag/v1.2.41)
- Upgrade instructions: [https://docs.kanboard.org/v1/admin/upgrade/](https://docs.kanboard.org/v1/admin/upgrade/)
- Documentation: [https://docs.kanboard.org/](https://docs.kanboard.org/)
- Docker images:
  - Docker Hub: `docker.io/kanboard/kanboard:v1.2.41`
  - GitHub Container Registry: `ghcr.io/kanboard/kanboard:v1.2.41`
  - [Quay.io](http://Quay.io) Container Registry: `quay.io/kanboard/kanboard:v1.2.41`

## List of Changes

- feat: add new plugin hooks in project forms
- feat: add option to add BOM at the beginning of CSV files (required for Microsoft Excel)
- feat: validate app config form values
- feat: add cancel button on 2FA code validation screen
- fix: add CSRF check to the logout endpoint
- fix: add HTML escaping when displaying exception message
- fix: add URL validation for external task links
- fix: correct broken migration logic for Sqlite

---

<div class="post-metadata">

**Author:** ![fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@fred](https://kanboard.discourse.group/u/fred)\
**Post date:** [October 26, 2024, 9:52pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/2 "2024-10-26T21:52:51Z")

</div>

Pinned globally on October 26, 2024, 9:52pm UTC



---

<div class="post-metadata">

**Author:** ![trendschuhe24](https://avatars.discourse-cdn.com/v4/letter/t/c5a1d2/32.png) [@trendschuhe24](https://kanboard.discourse.group/u/trendschuhe24)\
**Post date:** [October 27, 2024, 6:04pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/3 "2024-10-27T18:04:31Z")

</div>

Hallo,

nach der Installation konnte man sich nicht mehr abmelden, Zugriff verweigert.  
Folgende Plugin könnten daran schuld sein Group\_assign und Customizer  
Bin jetzt wieder auf 1.2.40 , da funktioniert alles wieder.  
Hier auch mal eine Liste der bei mir installierten Plug in:  
KanboardCSS, Group\_assign,DeleteTaskOnCloseColumn,Customizer,Bigboard,  
AutomaticActionUX,ApplicationBranding  
Vielleicht einer eine Idee woran es liegt?  
Gruß Michael

---

<div class="post-metadata">

**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\
**Post date:** [October 29, 2024, 9:48am UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/4 "2024-10-29T09:48:51Z")

</div>

Vielleicht liegt es an der Art, wie du das Update gemacht hast. Etwas schiefgelaufen?

---

<div class="post-metadata">

**Author:** ![trendschuhe24](https://avatars.discourse-cdn.com/v4/letter/t/c5a1d2/32.png) [@trendschuhe24](https://kanboard.discourse.group/u/trendschuhe24)\
**Post date:** [October 29, 2024, 2:18pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/5 "2024-10-29T14:18:13Z")

</div>

Nein alle sauber durch gelaufen, konnte mich anmelden, aber beim abmelden kommt dann die Meldung"Zugriff verboten", so konnte ich mich nicht mehr abmelden …

---

<div class="post-metadata">

**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\
**Post date:** [October 29, 2024, 2:20pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/6 "2024-10-29T14:20:57Z")

</div>

Deaktiviere die Plugins, um die Ursache einzugrenzen.

---

<div class="post-metadata">

**Author:** ![trendschuhe24](https://avatars.discourse-cdn.com/v4/letter/t/c5a1d2/32.png) [@trendschuhe24](https://kanboard.discourse.group/u/trendschuhe24)\
**Post date:** [October 29, 2024, 3:31pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/7 "2024-10-29T15:31:12Z")

</div>

Habe ich gemacht, es betriftt Group\_assign und Customizer.

Hier auch mal eine Liste der bei mir installierten Plug in:

KanboardCSS, Group\_assign,DeleteTaskOnCloseColumn,Customizer,Bigboard,  
AutomaticActionUX,ApplicationBranding

Da ich mir jetzt unsicher war, ob vielleicht auch andere Plugins, von den oben genannten, Probleme machen, bin ich erst mal wieder runter auf 1.2.40

---

<div class="post-metadata">

**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\
**Post date:** [October 29, 2024, 3:33pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/8 "2024-10-29T15:33:25Z")

</div>

Da ich all dies nicht benutze, kann ich dazu nichts wirklich Erhellendes sagen. Sorry.

---

<div class="post-metadata">

**Author:** ![RainerBielefeld](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/rainerbielefeld/32/1076_2.png) [@RainerBielefeld](https://kanboard.discourse.group/u/RainerBielefeld)\
**Post date:** [October 31, 2024, 4:25pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/9 "2024-10-31T16:25:02Z")

</div>

Ich kann das Problem bestätigen. Bei mir ist Verursacher allerdings ausschließlich das Plugin “Customizer”: Führt beim Anmeldeversuch zu

 ![grafik](https://global.discourse-cdn.com/free1/uploads/kanboard1/original/2X/2/2e6708d393e750ac1d961701eb2e8349ed1aa9c2.png)

Ich werde später einen ausführlichen Bugreport beim Plugin schreiben, wahrscheinlich auch schon mit Log-Ergebnissen.

CU

Rainer

---

<div class="post-metadata">

**Author:** ![RainerBielefeld](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/rainerbielefeld/32/1076_2.png) [@RainerBielefeld](https://kanboard.discourse.group/u/RainerBielefeld)\
**Post date:** [October 31, 2024, 6:55pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/10 "2024-10-31T18:55:40Z")

</div>

> [@trendschuhe24](#):
>
> Group\_assign

Done:  
"Can not logout with installed Plugin “Customizer” since KANBOARD 1.2.41 🐛 [#153](https://github.com/creecros/Customizer/issues/153) "

---

<div class="post-metadata">

**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\
**Post date:** [October 31, 2024, 9:03pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/11 "2024-10-31T21:03:50Z")

</div>

As a workaround, you can comment out line #61 if the file app/Controller/AuthController.php, and hope that @creecros soon will fix the Customizer plugin.

 ![image](https://global.discourse-cdn.com/free1/uploads/kanboard1/original/2X/f/fa0b791e3a0f87850d83e2f58ef2f772a3d7e992.png)

EDIT: In case you cannot or don’t want to wait, you can download and use my patched version of Customizer-1.14.2 from [here](https://cloud.alfredbuehler.ch/index.php/s/tRNrZjcChNp9QrP). This should solve the logout issue, but leaving the CSRF checking intact.

---

<div class="post-metadata">

**Author:** ![fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@fred](https://kanboard.discourse.group/u/fred)\
**Post date:** [November 10, 2024, 10:56pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/12 "2024-11-10T22:56:10Z")

</div>

Unpinned on November 10, 2024, 10:56pm UTC



---

<div class="post-metadata">

**Author:** ![TickDracy](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/tickdracy/32/1949_2.png) [@TickDracy](https://kanboard.discourse.group/u/TickDracy)\
**Post date:** [November 16, 2024, 6:02pm UTC](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/13 "2024-11-16T18:02:21Z")

</div>

Thank you! You’re the MVP 😉
