Hello FriSay Community,

We are happy to announce the release of FriSay v2.5.5.

This release focuses on improving the platform's security, stability, and developer experience rather than introducing new features. Several core improvements have been made to strengthen the framework and simplify future development.

🚀 Highlights
🔒 Centralized CSRF Protection

All POST requests are now validated through a centralized CSRF security layer, providing stronger protection across both the storefront and the administration panel.

⚙️ New Core Autoload System

Core classes are now loaded automatically. Developers no longer need to manually include new core files, making development cleaner and less error-prone.

🛡️ Hardened Autoload Security

Additional validation has been added to the autoload mechanism to prevent unauthorized file loading and improve overall system security.

🔄 Backward Compatibility

Legacy CSRF token formats remain supported, allowing existing modules to continue working without modification.

🐞 Bug Fixes
Fixed several missing CSRF validations in the administration panel.
Updated POS login and lock screen security.
Added CSRF protection to the KuveytTürk payment form.
Updated the Alert Price module to support the new security layer.

FriSay v2.5.5 is a recommended update focused on strengthening the platform's core architecture and long-term reliability.

Thank you to everyone who continues to support and improve the FriSay ecosystem. Your feedback and contributions help make FriSay stronger with every release.

🚀 Modern • Modular • Open Source