Skip to content

v1.62.11

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Sep 15:31
· 200 commits to master since this release
v1.62.11
6072c96
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Security fixes from a follow-up external audit:
    • Only an editor can add a new document to a shared workspace. A viewer or reviewer on an "anyone with the link" workspace could previously make the collaboration server register arbitrary document ids just by asking to sync them — cluttering the workspace and, in bulk, slowing its next restart.
    • The rel="noopener noreferrer" hardening applied to raw <a target="_blank"> links in a document now also catches uppercase variants (target="_BLANK", rel="OPENER") and links inside inline SVG.

Full Changelog: v1.62.10...v1.62.11

Assets 2
Loading