Skip to content

v3.7.0

Choose a tag to compare

View all tags
@fecommunity fecommunity released this 12 Jul 04:38
· 169 commits to master since this release
v3.7.0
827c178

ReactPress 3.7.0

Current npm @latest dist-tag. Install: npm i -g @fecommunity/reactpress

Security

  • SQL injection: whitelist filter column names in public list API findAll() handlers
  • Stored XSS: sanitize comment HTML after markdown parsing; require JWT for POST /comment; CSP headers via Helmet
  • Credit: reported by lsr365400

Full Changelog: v3.6.0...v3.7.0

Assets 2
Loading