10.31.7
Security fix: customer and booking personal notes are now sanitized on save (admin and REST API) and escaped on output, preventing stored HTML/script injection Fixed: services with a mid-appointment break — valid start times that overlap another booking’s break are no longer rejected, so the day is no longer wrongly shown as fully booked Fixed: the service break window is now aligned to the booking interval, so a break can no longer start off the time grid Fixed: saving a booking with no services selected no longer wipes the services