Skip to content

v1.8.1

Choose a tag to compare

View all tags
@ilbee ilbee released this 27 Mar 15:32
· 5 commits to main since this release
1.8.1
6bad3ea

Security

  • Use Symfony's HeaderUtils::makeDisposition() instead of manual sprintf for Content-Disposition header, preventing HTTP header injection via crafted filenames (RFC 6266 compliant)

Closes #24

Full Changelog: 1.8.0...1.8.1

Assets 2
Loading