🎉 v1.8.1 - Security, Performance & Clickable Widgets
Hello everyone! Shortly after the v1.8 release, we are rolling out v1.8.1. This is a highly recommended update that addresses a critical security vulnerability, introduces massive performance gains, and adds highly requested interactive features to the extension.
🔒 Security Fix: Stored XSS Patched
A big thanks to the community for reporting this! In v1.8, discussion titles containing HTML/JS payloads could execute malicious scripts on mobile views due to an unsafe innerHTML injection technique.
- Fix: All UGC (User Generated Content) inputs are now securely escaped using strict DOM text properties (
textContent). Code injection via discussion titles is completely neutralized.
🚀 Performance Boost: Goodbye CPU Polling!
We discovered a heavy production risk where an infinite requestAnimationFrame loop was tracking route changes at 60fps+ continuously, burning CPU cycles and battery even when the user was entirely idle.
- Fix: The loop has been entirely removed. We now rely on Flarum's native, event-driven page lifecycle hooks (
oncreate and onupdate), drastically lowering the extension's resource footprint and improving overall forum fluidity.
🔗 New Feature: Fully Interactive Sidebar Widgets
The desktop sidebar panel is no longer just static text!
- Clicking on Tag Labels or Private Discussion Recipient Users will now seamlessly navigate you directly to the respective tag page or user profile.
- Built using Flarum's internal SPA
Link component with strict event-propagation handling, ensuring snappy, layout-safe transitions without full page refreshes.
🔧 Under the Hood & Code Quality
- DRY Refactoring: Merged duplicated scrubber substitution code blocks into a unified, clean helper function.
- Dependency Cleanups: Removed dead/unused PHP class imports (
SettingsRepositoryInterface) from extend.php and stripped noisy console.log statements from production builds.
📋 Features Recap

For those new to Sticky Title, here's what the extension offers:
- Mobile Discussion Titles: Keep discussion titles visible in the mobile header while scrolling.
- Desktop Sidebar Panel: Display discussion title, tags, or Byobu recipients in a beautiful sidebar panel.
- Scrubber Enhancement: Replace "Original Post" text with the actual discussion title.
- Customizable Tag Colors: Choose between background, text, or border color styles.
- Blog & Pages Integration: Full out-of-the-box title support for Flarum Blog articles and FoF Pages.
🔧 Installation
composer require huseyinfiliz/sticky-title:"*"
🔄 Update Instructions
composer update huseyinfiliz/sticky-title:"*"
php flarum cache:clear
⚙️ Configuration
All features can be configured through the admin panel under Extensions > Sticky Title:
- Mobile scroll direction behavior (Always, Scroll Up, Scroll Down, Never)
- Scrubber replacement options
- Desktop sidebar title display
- Tag color style preferences (Background, Text, or Border)
- FoF Pages and Blog header toggles
🔗 Links
GitHub: huseyinfiliz/sticky-title
Packagist: huseyinfiliz/sticky-title
🙏 Feedback & Support
⭐ Don’t forget to star the repository on GitHub if you like the extension!
ℹ If you encounter any bugs or have feature requests, please drop a reply below.
Enjoy the faster, safer update! 🎉
Thanks: @ClaudiusH (Issue #1) Impulsive5