From 7644f78d8b3df1618067ea1162a48c7c721d231a Mon Sep 17 00:00:00 2001 From: azett Date: Sun, 8 Jan 2023 13:26:52 +0100 Subject: [PATCH] added #188 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 74fea05..402c8fd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -47,7 +47,7 @@ - Possible XSS prevented: Session cookie missed the "secure" and "httponly" flags - Proper check of uploaded files ([#152](https://github.com/flatpressblog/flatpress/issues/152), [#170](https://github.com/flatpressblog/flatpress/issues/170)) - Possible XSS prevented: Admin Area URL ([#153](https://github.com/flatpressblog/flatpress/issues/153)) -- Possible XSS prevented: SVG/XML/MD upload ([#172](https://github.com/flatpressblog/flatpress/issues/172), [#178](https://github.com/flatpressblog/flatpress/issues/178)) +- Possible XSS prevented: Upload of misc. XML file types ([#172](https://github.com/flatpressblog/flatpress/issues/172), [#178](https://github.com/flatpressblog/flatpress/issues/178), [#188](https://github.com/flatpressblog/flatpress/issues/188)) - Directory browsing prevented ([#174](https://github.com/flatpressblog/flatpress/issues/174)) - Possible XSS in setup prevented ([#176](https://github.com/flatpressblog/flatpress/issues/176)) - Possible XSS in Media Manager plugin prevented ([#177](https://github.com/flatpressblog/flatpress/issues/177))