We've just released #Halcyon 1.1.5 with the following changes:
- Added the new Idempotency-Key header which avoids double-posting with bad connection
- Fixed an bug allowing XSS injections using the display name
You can download the release from https://github.com/halcyon-suite/halcyon/releases/tag/1.1.5 but please be sure not to delete your config.ini or the contents of the "data" directory if you upgrade from an older version.