Skip to content

2.0.14

Latest

Choose a tag to compare

@rhukster rhukster released this 30 Jul 15:53
5192316

Improved

  • Removed old JQuery 2.1.4. However 2.2.4 and 3.7.1 remain for legacy support

Bugfix

  • [security] An administrator with account-management rights can no longer grant themselves super-admin access by saving it into a user group's permissions, a protection the account form already had (GHSA-xhfv-7758-r9hx).
  • [security] The content security scan no longer reports a page as clean when it was unable to examine it, closing two ways a page editor could hide a script from it: a single invalid character anywhere in the content, and padding a tag out to several thousand characters (GHSA-q2j8-x8hf-63ch).