From 77aded3125e5a67bf042c2679d97f96eb2b18393 Mon Sep 17 00:00:00 2001 From: Andris Reinman Date: Sun, 19 Mar 2017 14:29:34 +0200 Subject: [PATCH] v1.23.0 --- CHANGELOG.txt | 7 +++++++ package.json | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.txt b/CHANGELOG.txt index 81317b687..8b94b01be 100644 --- a/CHANGELOG.txt +++ b/CHANGELOG.txt @@ -1,5 +1,12 @@ # Changelog +## 1.23.0 2017-03-19 + + * Fixed security issue where description tags were able to include script tags. Reported by Andreas Lindh. Fixed with [ae6affda] + * Fixed security issue where templates that looked like file paths loaded content from arbitrary files. Reported by Andreas Lindh. Fixed with [0879fa41] + * Fixed security issue where users were able to use html tags in subscription values. Reported by Andreas Lindh. Fixed with [9d5fb816] + * Support for multiple HTML editors (Mosaico, GrapeJS, Summernote, HTML code) + ## 1.22.0 2017-03-02 * Reverted license back to GPL-v3 to support Mosaico diff --git a/package.json b/package.json index f60bb5250..5c0eb3491 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "mailtrain", "private": true, - "version": "1.22.0", + "version": "1.23.0", "description": "Self hosted email newsletter app", "main": "index.js", "scripts": {