From c8b4ba354f82fbbcebbbfca65b40a047f9920525 Mon Sep 17 00:00:00 2001 From: joey Date: Wed, 21 Mar 2007 18:52:56 +0000 Subject: * Fix a security hole that allowed insertion of unsafe content via the meta plugins's support for inserting html link and meta tags. Now such content is passed through the htmlscrubber like everything else. * Unfortunatly, that means that some valid uses of those tags are no longer usable, and special case methods needed to be added for including stylesheets, and for doing openid delegation. If you use either of these in your wiki, it will need to be modified. See the meta plugin docs for details. --- debian/changelog | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 976143aee..42b23945a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,16 @@ +ikiwiki (1.47) UNRELEASED; urgency=low + + * Fix a security hole that allowed insertion of unsafe content via the meta + plugins's support for inserting html link and meta tags. Now such content + is passed through the htmlscrubber like everything else. + * Unfortunatly, that means that some valid uses of those tags are no longer + usable, and special case methods needed to be added for including + stylesheets, and for doing openid delegation. If you use either of these + in your wiki, it will need to be modified. See the meta plugin docs + for details. + + -- Joey Hess Wed, 21 Mar 2007 14:05:00 -0400 + ikiwiki (1.46) unstable; urgency=low * Fix a bug with inlined create page links, including Discussion links on -- cgit v1.2.3