---
title: "1.37.1 — WebApp cache fixes and tighter data access"
description: "Corrects hosted WebApp caching and keeps prior fingerprinted assets available while tightening storage authorization, nested-user privacy, and SMS sign-in secret handling."
date: "2026-10-20"
tags: ["release"]
canonical: "https://django-mojo.sitesmojo.com/changelog/1-37-1/"
---

Corrects hosted WebApp caching and keeps prior fingerprinted assets available while tightening storage authorization, nested-user privacy, and SMS sign-in secret handling.

### Changed
- Hosted WebApp pages and unhashed assets now require revalidation, while fingerprinted assets keep long-lived immutable caching.
- WebApp deployments keep fallback links to the prior two serving releases so old fingerprinted asset URLs continue to resolve after a deploy.

### Security
- Storage creation and upload paths now require appropriate group membership or file permissions before any write, and unsafe storage purpose names are refused.
- Nested user responses hide seven private account fields from viewers without full account access and refuse filters on those fields.
- SMS sign-in codes and links are redacted from stored message bodies and relay metadata, with an opt-in cleanup command for existing rows.