Skip to content

2.15.2

Compare
Choose a tag to compare
@kuzmany kuzmany released this 01 Aug 15:44
de5fc98

Change Log

Features

Security

  • Escape validation error messages to avoid HTML tag rendering in the UI
  • Prevent open redirect vulnerability
  • Disable unserializing of classes. We should unserialize only array data
  • Escape values in Lead and Report bundles to prevent html formatting

Enhancements

Bugs

Developer notes

SHA1 2.15.2.zip: 4452818b3a806b7eaac9fe507717564229da5fef
SHA1 2.15.2-update.zip: fec2e421d1161021c2e953f350c2e06c6afd0dc4

A big thank you to the following community members for contributing to this release either by code or bug report: @alanhartless, @anton-vlasenko, @atbrowne, @billybobilly, @cceruti, @DanielCiochiu, @Dcoutelle, @dongilbert, @Drukmistrz, @dsp76, @enableit, @Enc3phale, @escopecz, @florentpetitjean, @florianwessels, @GosuTeacher, @heathdutton, @hluchas, @imihandstand, @jnewton001, @johbuch, @jojomnky, @josaiasmoura, @KalleVuorjoki, @kuzmany, @LevryKurniawan, @maheshprabhu2010, @Maxell92, @maxlawton, @moskoweb, @mtahiue, @MyBpoConsultant, @Noa83, @npracht, @ondrejsibl, @online-expert, @pjeby, @rbagley0310, @rkaartikeyan, @scottshipman, @shershennm, @taewookim, @tsummerer, @vesper8, @YosuCadilla