Skip to content

v2.8.3

Compare
Choose a tag to compare
@aheinze aheinze released this 07 Apr 22:30
· 55 commits to develop since this release
  • Fix: Reflected Cross-Site Scripting via GraphQL Viewer
  • Fix: Stored Cross-Site Scripting in Content Item using text fields
  • Fix: Arbitrary File Write through Path Traversal and Rename Functionality of Finder
  • Fix: Static Cross-Site Request Forgery Csrf Token
  • Fix session after account save
  • Fix deprecation message on mime check (image api)
  • Update TinyMCE to v7.0.0
  • Update uppy.js to v.3.23.0
  • Add finder.disabled setting
  • Add error notification on failed asset upload