Repository navigation
v0.29.4
Someone signing up can no longer choose the address of their picture. There is no migration in this release.
Security
- An email sign-up could set any picture address, and other members' browsers then fetched it, which told that server when they were looking and from where. The sign-up form sends no picture, so it is now dropped. GitHub's and a provider's stay. Pictures already stored are not changed. (#236)