diff options
| author | Joey Hess <joey@kodama.kitenet.net> | 2008-02-10 17:17:44 -0500 |
|---|---|---|
| committer | Joey Hess <joey@kodama.kitenet.net> | 2008-02-10 17:17:44 -0500 |
| commit | bbcf878f75ee5468c062b0a1569177b66be8001b (patch) | |
| tree | ef515e0031aefadf5b65aaca9e0a066eed5ab8ef /debian/changelog | |
| parent | 4bfdbd4858bc7842df97902e0bc9bd5d2bef861e (diff) | |
* meta: Check that the urls provided for authorurl, permalink, and openid
are safe and can't contain javascript.
Diffstat (limited to 'debian/changelog')
| -rw-r--r-- | debian/changelog | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 1b4b70d8c..719150ee6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -11,6 +11,7 @@ ikiwiki (2.40) UNRELEASED; urgency=low ikiwiki (2.31.3) unstable; urgency=high + [ Josh Triplett ] * Do not allow the about: URI scheme; some browsers interpret about: URIs like a limited version of data: URIs. In particular, some versions of Internet Explorer interpret arbitrary HTML content in @@ -18,6 +19,10 @@ ikiwiki (2.31.3) unstable; urgency=high * Also filter the attributes cite, longdesc, and usemap, which can contain URIs. + [ Joey Hess ] + * meta: Check that the urls provided for authorurl, permalink, and openid + are safe and can't contain javascript. + -- Josh Triplett <josh@freedesktop.org> Sun, 10 Feb 2008 13:59:00 -0800 ikiwiki (2.31.2) unstable; urgency=high |