diff --git a/CHANGELOG.md b/CHANGELOG.md index 842622a..0d43f45 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -46,8 +46,9 @@ ## Security - Possible XSS prevented: Session cookie missed the "secure" and "httponly" flags - Possible path traversal in Media Manager plugin prevented -- Uploaded files weren't checked properly ([#152](https://github.com/flatpressblog/flatpress/issues/152), [#170](https://github.com/flatpressblog/flatpress/issues/170)) +- Proper check of uploaded files ([#152](https://github.com/flatpressblog/flatpress/issues/152), [#170](https://github.com/flatpressblog/flatpress/issues/170), ) - Possible XSS prevented: Admin Area URL ([#153](https://github.com/flatpressblog/flatpress/issues/153)) +- Possible XSS prevented: SVG upload ([#172](https://github.com/flatpressblog/flatpress/issues/172)) # 2021-06-19: [FlatPress 1.2.1](https://github.com/flatpressblog/flatpress/releases/tag/1.2.1) ## Bugfixes