Skip to content

emdash@0.28.1

Choose a tag to compare

View all tags
@emdashbot emdashbot released this 07 Jul 19:06
emdash@0.28.1
c67e177
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • #1850 b92807f Thanks @khoinguyenpham04! - Fixes internal media usage repair so partial draft failures, concurrent content deletes, and fresher usage writes keep repair coverage non-complete without discarding valid indexed usage.

  • #1863 9e4701e Thanks @swissky! - Fixes a privilege escalation on private plugin API routes: an editor (or a cross-origin page) could invoke admin-only, state-changing plugin routes by sending them as GET or HEAD instead of POST, which bypassed the permission tier and CSRF check. Every private plugin route now requires plugins:manage and the CSRF header regardless of HTTP method.

  • Updated dependencies []:

    • @emdash-cms/admin@0.28.1
    • @emdash-cms/auth@0.28.1
    • @emdash-cms/gutenberg-to-portable-text@0.28.1
Assets 2
Loading