You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Security fix: restoring a page or block revision now requires an admin login and the Restore Revision permission.
Security fix: revision previews now use signed links from the admin revision grid that expire after 1 hour; other preview URLs show the 404 page, and preview pages are no longer stored in the full page cache.
Security fix: deleting revisions now requires the Delete Revision permission (before, any logged-in admin user could delete them).
Earlier versions let unauthenticated requests restore and preview revisions.
Verified by static analysis of the changed files (PHPCompatibility, php -l on PHP 5.6, 7.4, 8.1 and 8.3); not run on a live store.