From 5483ebc129b4643b44bf55b975b946298f9ab9c3 Mon Sep 17 00:00:00 2001 From: Arvid Zimmermann Date: Sun, 25 Dec 2022 15:04:45 +0100 Subject: [PATCH] added #176 #177 #178 #179 --- CHANGELOG.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 982985a..ffb9660 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -48,8 +48,11 @@ - Possible path traversal in Media Manager plugin prevented - Proper check of uploaded files ([#152](https://github.com/flatpressblog/flatpress/issues/152), [#170](https://github.com/flatpressblog/flatpress/issues/170)) - Possible XSS prevented: Admin Area URL ([#153](https://github.com/flatpressblog/flatpress/issues/153)) -- Possible XSS prevented: SVG upload ([#172](https://github.com/flatpressblog/flatpress/issues/172)) +- Possible XSS prevented: SVG/XML/MD upload ([#172](https://github.com/flatpressblog/flatpress/issues/172), [#178](https://github.com/flatpressblog/flatpress/issues/178)) - Directory browsing prevented ([#174](https://github.com/flatpressblog/flatpress/issues/174)) +- Possible XSS in setup prevented ([#176](https://github.com/flatpressblog/flatpress/issues/176)) +- Possible XSS in Media Manager plugin prevented ([#177](https://github.com/flatpressblog/flatpress/issues/177)) +- Possible path traversal in file deletion prevented ([#179](https://github.com/flatpressblog/flatpress/issues/179)) # 2021-06-19: [FlatPress 1.2.1](https://github.com/flatpressblog/flatpress/releases/tag/1.2.1) ## Bugfixes