From 886adf9f9fea74560202fafcb4742ce26cd76416 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Sun, 10 Feb 2008 18:58:41 -0500 Subject: add news item for ikiwiki 2.32.3 --- doc/news/version_2.32.3.mdwn | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 doc/news/version_2.32.3.mdwn (limited to 'doc/news/version_2.32.3.mdwn') diff --git a/doc/news/version_2.32.3.mdwn b/doc/news/version_2.32.3.mdwn new file mode 100644 index 000000000..3d0177a52 --- /dev/null +++ b/doc/news/version_2.32.3.mdwn @@ -0,0 +1,18 @@ +ikiwiki 2.32.3 released with [[toggle text="these changes"]] +[[toggleable text=""" + * [ Josh Triplett ] + * Do not allow the about: URI scheme; some browsers interpret about: + URIs like a limited version of data: URIs. In particular, some + versions of Internet Explorer interpret arbitrary HTML content in + about: URIs. + * Also filter the attributes cite, longdesc, and usemap, which can contain + URIs. + * [ Joey Hess ] + * meta: Check that the urls provided for authorurl, permalink, and openid + are safe and can't contain javascript. + * [ Josh Triplett ] + * Match literal '.' in URI schemas containing '.', rather than matching any + character. + * Do not allow the steam: URI scheme. + * Allow the snews: URI scheme. + * Allow the smb: URI scheme."""]] \ No newline at end of file -- cgit v1.2.3