
- Fix: Resolved an issue where Apple Pay was not opening inside the Stripe Express Payment Element when using Safari.
- Fix: Improved security in the Geolocation map info windows by safely handling vendor-supplied shop names, titles, and links to prevent stored cross-site scripting.
- Fix: Ensured product add-on groups can only be deleted by the vendor who owns them.
- Fix: Restricted the all-order-logs CSV export to marketplace administrators, ensuring vendor order and earnings data remains private.