# proxbox-api v0.0.8.post1

proxbox-api v0.0.8.post1

| Field |Value |
| --- | --- |
| Canonical URL | https://emersonfelipesp.com/proxbox-api/releases/v0.0.8.post1 |
| GitHub URL | https://github.com/emersonfelipesp/proxbox-api/releases/tag/v0.0.8.post1 |
| Tag | v0.0.8.post1 |
| State | stable |
| Author | emersonfelipesp |
| Created | 2026-04-23 18:02 UTC |
| Published | 2026-04-23 18:02 UTC |
| Target | main |
| Synced | 2026-08-24 18:36 UTC |
| Assets | 0 |

## Release notes

## proxbox-api v0.0.8.post1

Patch release on top of v0.0.8 fixing the API documentation UI.

### What's fixed

- **Self-hosted Swagger UI and ReDoc assets** — `swagger-ui-bundle.js`, `swagger-ui.css`, and `redoc.standalone.js` are now served from `/static/swagger-ui/` instead of loading from external CDNs (`cdn.jsdelivr.net`, `fonts.googleapis.com`). This fixes blank documentation pages in network-isolated environments and resolves CSP violations caused by `SecurityHeadersMiddleware`.

- **Docs-specific Content Security Policy** — `/docs` and `/redoc` now receive a targeted CSP (`script-src 'unsafe-inline'`, `style-src 'unsafe-inline'`, `img-src data:`) that allows Swagger UI's inline initialisation script and ReDoc's React inline styles to execute. All other endpoints retain the strict `default-src 'self'` policy.

- **ReDoc Google Fonts removed** — `with_google_fonts=False` is set on the custom `/redoc` route, eliminating the `fonts.googleapis.com` and `fonts.gstatic.com` requests that were blocked by the CSP.

### Upgrade notes

No database migrations or configuration changes required. Restart the server after upgrading.

## Assets

No binary assets attached.

Source archives:

| Format |URL |
| --- | --- |
| zip | https://api.github.com/repos/emersonfelipesp/proxbox-api/zipball/v0.0.8.post1 |
| tar.gz | https://api.github.com/repos/emersonfelipesp/proxbox-api/tarball/v0.0.8.post1 |