Skip to content

1.8.232

Latest
Latest

Choose a tag to compare

View all tags
@freescout-help-desk freescout-help-desk released this 31 Jul 08:20
1.8.232
e081807

In some cases in order to install this release the /vendor and /overrides folders will need to be removed before updating:#5538 (comment)

After installing this release make sure to update modules to the latest version.

Fixed

  • Use salt in tools.php auth.
  • Return empty value in Helper::decrypt() when decryption fails.
  • Tighten throttling Forgot Password requests (Security: GHSA-jvmv-2qcp-7855)
  • Throttle ResetPasswordController controller.
  • Escape title in symfony ExceptionHandler.
  • Purify mailbox signature HTML on saving.
  • Sanitize module alias on activating a license.
  • Add hash to lang.zip name when downloading translations.
  • Use hash_equals() when checking attachment token.
  • Use hash_equals() to compare hashes.
  • Fix potential TypeErrors.
  • Revert changing last_reply_at field update logic (#5501)
  • Patch "guzzlehttp/psr7: Host Confusion via Weak URI Host Validation" (Security: GHSA-c2w2-prh8-qm98)
  • Update Guzzle to the latest version.
  • Updade ezyang/htmlpurifier library.
  • Sanitize URL in Customer::setPhotoFromRemoteFile().
  • Fix case of items in Helper::checkUrlIpAndHost().
  • Do not allow regular users with PERM_EDIT_USERS edit admin profiles.
  • Allow to send a message containing only image.
  • Restrict file extensions uploaded by support agents.
Assets 2
Loading