Skip to content

v1.62.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Sep 13:36
· 205 commits to master since this release
v1.62.9
3c49ef2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Security hardening from a follow-up external audit:
    • Asking where a migrated legacy document went now requires access to that document — previously an unauthenticated request could learn the workspace id (and from there the document's title) if it already knew the old link.
    • A raw HTML <a target="_blank"> typed into a document's markdown always gets rel="noopener noreferrer" now, matching the app's own generated links.
    • Citation keys are HTML-escaped where they're placed into link/id attributes.

Full Changelog: v1.62.8...v1.62.9

Assets 2
Loading