1.0.18

1.0.18 (January 20, 2020)

Security

• CSRF vulnerability in Finder, discovered by Christian Bortone

1.0.17

1.0.17 (July 11, 2019)

Added

• Added new translations

1.0.16

Fixed

• Fixed Google reCAPTCHA

1.0.15

Added

• Added Google reCAPTCHA for user registration and blog comments

Fixed

• Fixed isValidFilename method in FinderController

1.0.14

Fixed

• Fixed browser autocomplete on login page
• Fixed module renaming on update

Security

• Open redirect vulnerability on login page, discovered by zhihua.yao from DBAPPSecurity
• Administrator profiles can only be managed by administrators

1.0.13

Fixed

• Fixed Facebook App ID meta tag
• Fixed Gravatar for Blog comments

1.0.12

Fixed

• Fixed active menu matching
• Fixed version displayed during extension updates
• Fixed overwriting of config defaults
• Fixed node selection for extensions
• Fixed form validation (Safari, Firefox and IE)

1.0.11

Security

• Fixed replay attack with password reset links when debug toolbar is enabled, discovered by SecureLayer7

1.0.10

Fixed

• Fixed Vue Warnings in Debug Bar
• Fixed URL replacement to undefined when using pagination (IE, Opera)

Security

• Stored XSS in email templates, discovered by Raphael de la Vienne

1.0.9

Fixed

• Fixed self update command
• Fixed an localisation issue which could lead to JS crashes (e.g. finder)