Skip to content

CMS Revisions 100.2.2

Latest

Choose a tag to compare

@milansimek milansimek released this 23 Oct 00:32
· 1 commit to main since this release
  • Security fix: restoring a page or block revision now requires an admin login and the Restore Revision permission.
  • Security fix: revision previews now use signed links from the admin revision grid that expire after 1 hour; other preview URLs show the 404 page, and preview pages are no longer stored in the full page cache.
  • Security fix: deleting revisions now requires the Delete Revision permission (before, any logged-in admin user could delete them).
  • Earlier versions let unauthenticated requests restore and preview revisions.
  • Verified by static analysis of the changed files (PHPCompatibility, php -l on PHP 5.6, 7.4, 8.1 and 8.3); not run on a live store.