Skip to content

1.10.61

Latest

Choose a tag to compare

@rhukster rhukster released this 05 Nov 21:41
0262d40

Bugfix

  • [security] Page saving now checks the folder name in every page action, and Save As only writes next to the page it was opened from. Thanks @rng70
  • [security] A page route containing . or .. segments no longer resolves to a page, so page saving and media uploads and deletions stay inside the pages folder
  • [security] The parent-page picker only lists folders inside the pages folder. Thanks @rng70
  • [security] Uploaded SVG files are sanitized whatever their last extension, in page media and in file fields