Skip to content

v2.26.3

Latest

Choose a tag to compare

@redimp redimp released this 05 Nov 22:34

Compare with v2.26.2

Security Fixes

  • Validate YouTube video id in Video embedding (0f5de69).
    Thanks to @nrbxyz for reaching out and reporting this issue.

Bug Fixes

  • Do not crash on line separators in embedding option keys (f5d1059).
  • Block html entity bypass of the url filter in embeddings (3986670).
  • Apply the dangerous style check to embedding styles (3af9836).
  • Limit the number of includes per render (ac1230d).
  • Do not show the repository path in datatable errors (c9e7978).
  • Skip attachments that resolve outside the repository (d48236b).