Postal 3.3.6

3.3.6 (2026-04-28)

Bug Fixes

• messages: sandbox rendered email HTML as extra XSS defence (cad2aa6)

Miscellaneous Chores

• ignore node modules and yarn.lock (b611d57)

Code Refactoring

• auth: tighten return_to validation (84f4e20)
• helpers: escape interpolated values in select options (9243524)
• tracking: remove unused src image proxy (dca7f90)